Brand new & very active Bagle variant

Ho ho, some fun. Got a new trend pattern file (emergency release) about 4pm that can see the new guy. Comes in a zip file with 'price' as part of the name and has a variety of baddies included.

If your AV update is older than this afternoon, you won't be protected unless the heuristics do better than usual and not even sure all the AV companies have an update available now that sees this one.

The attached picture is activity on our local network since 4:45pm when I reset the counter to zero. Each zip file seems to contain from 10 to 23 of the infected files.

 

Thanks NEWT

Several of my clients were sent this same variant. S

 

Whew - things are slowing down a little. Maybe because not so many folks working this shift. But the stuff that has slipped in since the last picture (and I zero'd the counts then so this is all new) is not quite as horrible.