Bugbear’ worm continues to bite

msnbc.com ^ | 10/4/02 | msnbc

[scab4faa]

Oct. 4 — The Bugbear worm continued to spread Friday, threatening to become the worst virus outbreak since Klez. Most antivirus firms raised their threat assessment of the worm late this week, after initially suggesting it wouldn’t spread much. One firm has already stopped over 100,000 copies of it. Bugbear packs a treacherous payload: it installs a keylogger on infected systems, so it can watch everything a victim types and steal information like passwords and account numbers.

[A CA Guy]

Is this an Email virus?

[scab4faa]

Yes

[EggsAckley]

Last week an email was delivered to me concerning the bank account of a neighbor, who is listed in my address book. I forwarded it to him, and he responded by telling me about the virus attacking his computer, but the email contained an attachment for a "cure." I was afraid to open the attachment, and still haven't. Fortunately I don't use Outlook.

[Anti-Bubba182]

I'M BACK!!!

SUPPORT FREE REPUBLIC

Donate Here By Secure Server

Or mail checks to
FreeRepublic , LLC
PO BOX 9771
FRESNO, CA 93794

or you can use

PayPal at Jimrob@psnw.com

STOP BY AND BUMP THE FUNDRAISER THREAD

WIPE THE SMILE OFF OF THIS MAN'S FACE.
VOTE THE RATS
OUT!! DONATE TODAY
SUPPORT FREE REPUBLIC

Donate here by secure server

Or mail checks to
FreeRepublic , LLC
PO BOX 9771
FRESNO, CA 93794

[Joy Angela]

A bugbear virus fix is at:

http://securityresponse.symantec.com/avcenter/venc/data/w32.bugbear@m...\ ool.html

I went to this site, but it looked too confusing for me! Hopefully some of you can make sense of it. Is it enough to just download the "fix" onto a disk and run it?

I downloaded the "fix" onto a disk but wasn't sure what to do next. I don't have the virus and don't want to mess up my computer trying to look for it either.

The site came direct from a good friend of mine, and I also spoke to her on the phone about it, so it's okay.

[Joy Angela]

Bump this thread!

Bug Bear Virus!

Also from the article...

Bugbear might be spreading because it is cleverly crafted and difficult to spot with the naked eye. It arrives in a victim’s e-mail inbox with a subject line chosen randomly from dozens of possibilities, including:
Free shipping!
Get 8 FREE issues - no risk!
Get a FREE gift!
My eBay ads
New bonus in your cash account
New Contests

The actual infected file arrives as an attachment, which also has a random name. And Bugbear’s first task, upon infection, is to disable all installed antivirus software.

“It’s throwing a lot of things at people to see if it can find something to slip under the radar,” Vincent Gullotto, vice president of the AVERT virus research lab at Network Associates Inc.

[jackbill]

Is this an Email virus?

Yes, it comes as an attachment to a normal sounding e-mail. I got one this morning, which Norton caught and quarantined.

I didn't recognize the name of the sender but the "subject" was something that I would normally be interested in - blue crabs. Nevertheless, I dumped it. Norton is certainly worth the cost.

[A CA Guy]

Is there an attachment? How big is it and what is the extention?

[goldilucky]

Thanks for the warning. I receive lots of mail like this but I never read them. As soon as I see the advertisments in my mail, I delete them before opening.

[nycgal]

Is it in anyway related to the scrsvr.exe worm?

[jackbill]

Is there an attachment? How big is it and what is the extention?

Is it in anyway related to the scrsvr.exe worm?

The virus is in the attachment.

The ones that I've received all have a file extension of .scr and they are all 49.5 kb in size.

[js1138]

Download the fix to a diskette, reboot is safe mode, run the program from the floppy.

Or go to antivirus.com and run their scanner.

[Joy Angela]

Thanks!

[my_pointy_head_is_sharp]

Check out AVG. They've already got an update for the Bugbear.

http://www.grisoft.com/html/us_index.htm