The Bagle Trojan-Worm Combination Strikes Again, Warns Panda Software

PandaLabs has reported the distribution of a new Trojan-worm combination, directed by a variant of Bagle (detected by Panda Software as Bagle.FU). This new threat is just the latest of many attempts to distribute variants of Bagle through combined attacks, using first a worm and then a Trojan. Both of these threats have, over the last few hours, caused numerous incidents, reported and blocked by TruPrevent(TM) Technologies, in computers around the world. These technologies have kept users' systems out of the reach of these threats from the outset.
The attack begins with the distribution, in a series of emails, of the worm components of Bagle.FU, compressed in files with names like Edmund.zip, Elizabeth.zip, or Henrie.zip, among others. When these files are opened and run, they install the Trojan which automatically tries to download a file from a long list of URLs. They also open an image of the Windows logo as other threats have previously done.
"This is not a new strategy, but is nevertheless still effective as the Trojan-worm combination makes these attacks both powerful and rapid, which is why solutions based solely on signature files expose their users to a significant risk window. This is not the case with users of TruPrevent(TM) Technologies," explains Luis Corrons, director of PandaLabs.
To help as many users as possible scan and disinfect their systems, Panda Software offers its free, online anti-malware solution, Panda ActiveScan, which now also detects spyware, at http://www.activescan.com. Webmasters who would like to include ActiveScan on their websites can get the HTML code free from http://www.pandasoftware.com/partners/webmasters.
For further information about these and other computer threats, visit Panda Software's Encyclopedia.
About PandaLabs
Since 1990, its mission has been to analyze new threats as rapidly as possible to keep our clients safe. Several teams, each specialized in a specific type of malware (viruses, worms, Trojans, spyware, phishing, spam, etc), work 24/7 to provide global coverage. To achieve this, they also have the support of TruPrevent(TM) Technologies, which act as a global early-warning system made up of strategically distributed sensors to neutralize new threats and send them to PandaLabs for in-depth analysis. According to AV-Test.org, PandaLabs is currently the fastest laboratory in the industry in providing complete updates to users (more info at http://www.pandasoftware.com/pandalabs.asp).
For more information: http://www.pandasoftware.com/virus_info
For more information:
Joann Chan
Public Relations Research Manager
Panda Software, USA
Tel: 818-543-6967
pr@pandasecurity.com

Author:  

Email:    

Topic:    

Content:

Related Articles

• AT&T launches Internet Security Webcast and MCI Signs Five-Year Global Managed Networking Services Contract
  18 December 2005



• StarForce Technologies presents new IT Security software Safe’n’Sec + Anti-Spyware
  15 December 2005



• Symantec Security Response
  15 December 2005



• Reflex Security Introduces Anti-Spyware Support to Network Intrusion Prevention Platform
  15 December 2005



• LIGATT Security Launches its New Computer Security Website ShopLIGATT.com; Gives Away 4 Tickets to the Rose Bowl Game
  15 December 2005



• Symantec's Norton Internet Security 2006 Ships With Linksys Routers
  15 December 2005



• Desktop Security Challenges Moving Beyond Microsoft to Include Many Popular Software Products
  15 December 2005



• RSA Security Makes Four Key Appointments
  14 December 2005



• As Concern Grows Over the Inability to Detect Non-Authentic Websites, TrustDefender Closes the Security GAP
  14 December 2005



• SurfControl Increases Customer Value and Market Reach Through Inclusion in Microsoft's Expanded Security Solutions Competency
  14 December 2005