W32/Bagle.FO is a mass mailing worm. The worm will infect Windows systems and spreads through email.
The infected email carries a spoofed 'From' address picked up randomly from the infected system.
The subject of the infected mail will be any one of the following;
Sindony Wynnefreede Winifred Stephen William Valentyne Thomas Syndony Wynefreed Sybyll Anthonye Alyce Androwe Suzanna Androw Andrew Sybell Robert Susan Nicholaus Sidney Samuell Rycharde Roger Roberte Richarde Susanna Richard Rebecka Ralph Peter Nycholas Margret Nicholas Nathanyell Nathaniel Mychaell Michael Marye Nathaniell Martha Marie Margrett Margerye Margerie Margarett Margaret Leonarde Leonard Katheryne Katherine Judithe Judeth Judith Johen Josias Joane Jeffrye Jeames James Isabell Isabel Humphrie Humphrey Jeffrey Hughe Henrye Fraunces Henry Harrye Harry Grace George Henrie Geoffraie Gabriell Francis Frances Ester Emanuell Edmonde Emanual Ellyn Elizabeth Ellen Emanuel Elizabethe Edwarde Edward Edmund Dorithie Edmond Dorothy Daniel Dorothee Danyell Cybil Constance Christian Bennett Christean Bennet Avice Anthony Alice Anthonie Annes Wynefrede
The body of the infected mail will be any one of the following;
I love you To the beloved
Continued with any one of the following;
Zip password: The password is Password -- Password - Password is archive password: Password: Use password
Followed by a image file. The image file displays random five digit number, which is the password to open the infected zip file.
The name of the infected attachment will be any one of the following;
Proland
Software is the developer of Protector Plus range of antivirus software
packages. Protector Plus 2007 is available for Windows Vista, Windows 95/98/Me, Windows
XP, Windows NT/2000/2003 servers and workstations, MS-Exchange 2000/2003, MS-DOS
and NetWare servers.
Protector Plus range of antivirus products
offer on-line virus detection and removal. All the packages have the ability
to detect and isolate all types of viruses, trojans, worms, backdoors,
spyware, adware, exploits, password stealers, hack tools, rootkits and other
malware. Protector Plus antivirus software can detect and
remove W32/Bagle.FO Worm reliably.
These products are updated on a continuous basis and the latest upgrades
for all the platforms are made available for downloading from this site.
About
Protector Plus Antivirus Software Packages:
Sindony 
