Wikiposts
Search
Computer/Internet Issues & Troubleshooting Anyone with questions about the terribly complex world of computers or the internet should try here. NOT FOR REPORTING ISSUES WITH PPRuNe FORUMS! Please use the subforum "PPRuNe Problems or Queries."

New 'bugbear' variant

Thread Tools
 
Search this Thread
 
Old 9th Jun 2003, 17:56
  #1 (permalink)  
Per Ardua ad Astraeus
Thread Starter
 
Join Date: Mar 2000
Location: UK
Posts: 18,579
Likes: 0
Received 0 Likes on 0 Posts
New 'bugbear' variant

Had several mates caught by a new nasty version of this, full info on the various virus sites. Seems to be particularly targeted at financial institutions.

Beware and update!
BOAC is offline  
Old 9th Jun 2003, 21:01
  #2 (permalink)  

Nice-but-dim
 
Join Date: Sep 2001
Location: Rural Yorkshire
Posts: 636
Likes: 0
Received 0 Likes on 0 Posts
I got it this morning on checking the overnight mail. Launched this morning from our head office (!). My updated NAV caught it OK.

Irony is, head office threats us with a £100 fine if any of our machines pass on a virus. Most of those I recieve come from aforesaid ivory towers. Perhaps I should fine them.
timmcat is offline  
Old 10th Jun 2003, 07:21
  #3 (permalink)  
The Oracle
 
Join Date: Aug 2001
Location: Naples, Florida U.S.A.
Posts: 2,902
Likes: 0
Received 0 Likes on 0 Posts
Bugbear is a bad one.

Here are its payloads:

Payload 1: Terminates antivirus processes

Payload 2: Compromises network security

Anyone worried should run an online scanner, just in case Payload 1 has hit their comp. Run:

Trend Micro's Housecall Online Virus Scan

To check your system.

Take Care,

Capt. Richard J. Gentil, Pres.
Naples Air Center, Inc.
Custom Computers of Naples, Inc.
Naples Air Center, Inc. is offline  
Old 15th Jun 2003, 02:38
  #4 (permalink)  
 
Join Date: Nov 1999
Location: Wivenhoe, not too far from the Clacton VOR
Posts: 319
Likes: 0
Received 0 Likes on 0 Posts
W32.Bugbear.B@MM is currently doing the rounds here in sunny Dorset UK. I got three in two days. Attachment called 2_Finchfield_Avenue.doc.scr carries the nasty little wotsit, although undoubtedly there are others. Nortons caught it OK so no probs with my computer touch wood!
Bern Oulli is offline  
Old 16th Jun 2003, 01:57
  #5 (permalink)  
 
Join Date: Jul 2001
Location: Stafford England
Posts: 78
Likes: 0
Received 0 Likes on 0 Posts
I got this too. Even our network virus scanner failed to stop it.

The odd thing about the email that (I think) brought the virus, is that it seemed relevant to me. What I mean is that it contained the kind of information I might expect to see in an e-mail from a client or supplier.

So watch out because cleaning it up is a right pain!
Dick Fisher is offline  
Old 16th Jun 2003, 02:41
  #6 (permalink)  
 
Join Date: Mar 2001
Location: Wet Coast
Posts: 2,335
Likes: 0
Received 0 Likes on 0 Posts
The odd thing about the email that (I think) brought the virus, is that it seemed relevant to me.

That's because it's one of the 'smarter' (not the right word but YKWIM) viruses. It takes the title of a genuine email out of the infected user's sent items, as well as your address from his/her .pab file.
PaperTiger is offline  

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off



Contact Us - Archive - Advertising - Cookie Policy - Privacy Statement - Terms of Service

Copyright © 2024 MH Sub I, LLC dba Internet Brands. All rights reserved. Use of this site indicates your consent to the Terms of Use.