Released on = December 17, 2005, 1:10 am

Press Release Author = MicroWorld

Industry = Computers

Press Release Summary = Sober Worm Strikes again

Press Release Body = Alice, Anna or Susan, This Trojan Has Some Pretty Names!



A new variant of the Bagle Trojan horse is found to be proliferating through
widespread spamming. Troj/BagleDl-AN trojan comes to your mailbox with an attachment
named Alice, Anna, Susan etc containing a venomous file called S3700020.EXE. The
message body of some mails, reads \"New Year\'s Day\",


What it does

Once you run the file, it copies itself to the Windows system folder by the name
ANTI_TROJ.EXE. Infiltrating further into the windows system, it smartly tricks the
user by displaying an image \"NTIMAGE.GIF\" using the default image viewer, by making
him/her believe that the execution of the file only opens an image file.


The BagleDl-AN tries to download a file from various sites.This file is saved in a
folder named EXEFLD in Windows folder.


Resolution

Timely updates of Microworld products will enable you keep off this breed of
threats. More info can be found at http://mwti.net/virus_info/virusalertd.asp?vid

Web Site = http://www.mwti.net

Contact Details = MicroWorld Technologies Inc.
Visit : www.mwti.net
email : response@mwti.net