We are now publishing the 5th update for today to detect a mass-mailer that sends out one of the downloaders and also a second level downloader of the Bagle mass-mailer. We are calling them W32/Bagle.EQ and W32/Bagle.ER@mm.

P.S. During writing this weblog entry another new Bagle arrived. This one goes as W32/Bagle.ES