Bagle.BU

Category: Trojan Downloader

Risk: Severe Risk

* Severe threats typically are remotely exploitable vulnerabilities, which can lead to system compromise. Successful exploitation does not normally require any interaction and exploits are in the wild. There exists a high possibility of potential system damage or security flaw. Attacker has complete control over your computer or install new software on your machine.

Description: None

Alias: TrojanDropper:Win32/Bagle.BU

Signatures:
process: winshost.exe: MD5 Hash: 4839199932f53bee841
process: winshost.exe: MD5 Hash: 4e118f4ee275c2013f4
process: winshost.exe: MD5 Hash: c449fa91a3d1d78e716
process: winshost.exe: MD5 Hash: 7202a3287648ae8ab45
process: winshost.exe: MD5 Hash: afaa5281f863f4a3614
process: winshost.exe: MD5 Hash: e52dec1ccda6fadbe69
process: winshost.exe: MD5 Hash: 307cf64cf5447361066
process: winshost.exe: MD5 Hash: f19dd60a833c870f4b2
process: winshost.exe: MD5 Hash: e2a904b855fd848936d
process: winshost.exe: MD5 Hash: e74e69126100bf0682b
process: anti_troj.exe: MD5 Hash: 4feab3cee0e9b399cb6..