2005.12.21

A version of Mitglied has been spammed out in large amounts since yesterday evening and is expected to spread further today. This trojan will normally try to download the email worm Bagle from a website.

Mitglied.OD is a trojan that might have backdoor, downloader and worm characteristics. In this case it has been spammed out in emails with subjects like Susanna and Harry and other names. The emails contain attachments with zip files.

Norman detected the malicious file inside the zip file and released signature files for this version yesterday evening. In any case you should not open the attachment.

For more information about Mitglied see:
http://www.norman.com/Virus/Virus_descriptions/26266/