Outbreak Name: Troj/BagleDl-AO
Outbreak Date: 12-15-05
IronPort's Virus Outbreak Filters Protect Customers from Bagle Outbreak Additional 4 Hours and 21 Minutes Protection
Background
IronPort's Virus Outbreak Filters protects customers within the critical period between the first exploit of a virus outbreak and the release of an AV signature. During the recent Bagle variant outbreak, Troj/BagleDl-AO, Outbreak Filters users were protected 4 hours and 21 minutes before an AV signature was available from any of the major AV vendors*. Troj/BagleDl-AO is a trojan horse that appears to have been deliberately spammed out to email addresses around the world. If the program inside the ZIP file is opened, the Trojan horse tries to connect to one of a number of websites in order to download further malicious code and hijack the infected PC.
Timeline
Outbreak Details & Timeline
| Date | December 15, 2005 |
| Name** | Troj/BagleDl-AO |
| 18:51 GMT | Virus Threat Level raised and protection starts |
| 23:12 GMT | First anti-virus signature published* |
Benefits
12 hours and 08 minutes of additional protection with Virus Outbreak Filters
*Calculated as first publicly published signature from any of the following vendors: Sophos, Trend Micro, Computer Associates, Kaspersky Labs, Symantec or McAfee. If signature time is not available, first publicly published alert time is used.
** As named by Sophos.
