9/1: Bagle-AN Worm Sends 'Foto' Attachment
September 1, 2004

Worm/Bagle.AN is an Internet worm that sends itself to other recipients by locating email addresses on the local disk. The email will have the following email characteristics:

Subject: foto
Body: foto
Attachment: foto.zip or fotos.zip

It also drops copies of itself to folders containing the string "shar." Those dropped files have the certain file names. View them and other information at Central Command page.