There's been a recently spate of e-mails sent around, with the subject line of "foto" and carrying a file called foto.zip, which of course is malicious code. Its a zip file containing an HTML file, which when opened will drop downloader component on the victim's machine, which then attempts to connect to one of many web sites to download the worm portion. This new viruses has been named Worm_Bagle.AI. The web sites that carry the propagation code have fortunately been replete with problems, which have prevented infection from reaching the heights it could have. The virus is also known as Bagle.AV [Panda], Download.Ject.D [Symantec], W32/Bagle.dll.dr [McAfee], Troj/BagleDl-A [Sophos]. More on this here.
foto.zip carries Worm_Bagle.AI
By Derek Sooman
Serving tech enthusiasts for over 25 years.
TechSpot means tech analysis and advice you can trust.
TechSpot means tech analysis and advice you can trust.
3 comments
12 likes and shares