TR/Bagle.FO - Trojan

See also

Summary

Full description

Statistics

Virus:	TR/Bagle.FO
Date discovered:	25/01/2006
Type:	Trojan
In the wild:	Yes
Reported Infections:	Low
Distribution Potential:	Low
Damage Potential:	Low to medium
Static file:	Yes
File size:	102.893 Bytes
MD5 checksum:	35BDCA59203212A44DE95369238E4E50
VDF version:	6.33.00.158

General Aliases:
   • Symantec: Bloodhound.Beagle
   • Mcafee: W32/Bagle.gen
   • Kaspersky: Email-Worm.Win32.Bagle.fg

Platforms / OS:
   • Windows 95
   • Windows 98
   • Windows 98 SE
   • Windows NT
   • Windows ME
   • Windows 2000
   • Windows XP
   • Windows 2003

Side effects:
   • Downloads malicious files
   • Drops a file
   • Drops a malicious file
   • Registry modification

It displays the content of a created pictorial file:

The picture has been edited for display purpose.

Files The following files are created:

– %TEMPDIR%\~7.exe Furthermore it gets executed after it was fully created. Further investigation pointed out that this file is malware, too. Detected as: TR/Dldr.Bagle.FO.3

– %TEMPDIR%\~8.jpg Furthermore it gets executed after it was fully created.

See a brief description here.

Description inserted by Philipp Wolf on Wed, 25 Jan 2006 17:57 (GMT+1)
Description updated by Philipp Wolf on Wed, 25 Jan 2006 18:54 (GMT+1)

» About Malware
» About Phishing
» Viruses In the Wild

« back