Video | Business Headlines | Internet | Science | Scientific Ethics | Technology | Search

 

W32.Bugbear@mm Upgraded To Level 4 Virus

W32.Bugbear@mm Upgraded To Level 4 Virus

Name: ::::::::::::W32.Bugbear@mm

Category: ::::::::::::4 (severe)

Virus Definitions: ::::::September 30, 2002 (US Pacific Time)

Type: ::::::::::::Worm

Aliases: ::::::::::::W32/Bugbear-A [Sophos], WORM_BUGBEAR.A [Trend], Win32.Bugbear [CA], W32/Bugbear@MM :[McAfee], I-Worm.Tanatos [AVP], W32/Bugbear [Panda], Tanatos [F-Secure]

Payload: ::::::::::::Large-scale emailing: Attempts to mass-mail to addresses harvested from a compromised host using it's own SMTP engine. Compromises security settings: May allow unauthorised access to compromised machines. Attempts to terminate processes of various antivirus and firewall programs.

Subject of email: ::::::Variable

Name of attachment: ::::::Variable, with double extension ending in .exe, .scr, or .pif

Size of attachment: ::::::50,688 bytes

Ports: ::::::::::::36794

Shared drives: :::::: :::Attempts to connect to available network resources

Today Symantec Security Response has upgraded W32.Bugbear@mm from a 3 to a level 4 virus on a scale of 1-5, with 5 being the most serious. The upgrade is due to the increase of customer submissions to Security Response from customers. As of yesterday morning, Symantec had a total 157 submissions of the virus from consumers. This morning, Symantec Security Response has had 2039 submissions from consumers.

W32.Bugbear@mm can be categorised as a blended threat. It is a mass-mailing worm and can also spread through network shares. It also has keystroke-logging and backdoor capabilities and attempts to terminate the processes of various antivirus and firewall programs. It includes a Trojan that attempts to disable antivirus and firewall software so it can then attempt to steal the user's passwords and credit card details. It installs a keylogger on compromised systems to capture the user's key strokes which could expose usernames and passwords or other confidential information. It has a bug that causes it to attempt to replicate to network printers when looking for network drives to infect. This can cause strange print outs from printers.

Both the subject of the email and the name of the attachment are variable but the size of the attachment is always 50,688 bytes. The worm's email message uses one of the following subjects:


Greets!
Get 8 FREE issues - no risk!
Hi!
Your News Alert
$150 FREE Bonus!
Re:
Your Gift
New bonus in your cash account
Tools For Your Online Business
Daily Email Reminder
News
free shipping!
its easy
Warning!
SCAM alert!!!
Sponsors needed
new reading
CALL FOR INFORMATION!
25 merchants and rising
Cows
My eBay ads
empty account
Market Update Report
click on this!
fantastic
wow!
bad news
Lost & Found
New Contests
Today Only
Get a FREE gift!
Membership Confirmation
Report
Please Help...
Stats
I need help about script!!!
Interesting...
Introduction
various
Announcement
history screen
Correction of errors
Just a reminder
Payment notices
hmm..
update
Hello!

All versions of Windows are vulnerable to this worm but users of Macintosh, Unix and Linux are not.

Virus definitions are available to Symantec customers through LiveUpdate. A removal tool is also available via Symantec Security Response at http://securityresponse.symantec.com/avcenter/venc/data/w32.bugbear@mm.htm As usual, Symantec encourages users to download virus definitions on a regular basis.

A scan to check for the presence of W32.Bugbear@mm is available at Symantec Security Check www.symantec.com/securitycheck . The free service enables PC and Macintosh home users around the globe the opportunity to pinpoint, understand, and resolve online security vulnerabilities of their individual computers.


© Scoop Media

 
 
 
Business Headlines | Sci-Tech Headlines

 


Westpac NZ: Warns About Sophisticated New Scam
Westpac NZ is warning New Zealanders about a sophisticated new scam that involves a fake Westpac investment prospectus.
The prospectus is formatted to resemble a Westpac document and includes professional-looking imagery... More>>



Campaign For NZ Coastal Tankers : Says Fuel Security At Risk

Three unions representing New Zealand shipping crews are mounting a united campaign to protect New Zealand’s fuel security and save New Zealand coastal tankers... More>>



Tourism: Travel Bubble With Cook Islands Resumes

Cook Islands tourism restarts today, ending a five-month border closure due to COVID-19. Graeme West, General Manager Australasia for Cook Islands Tourism Corporation, said today’s first flight of quarantine-free travel from New Zealand to the Cook Islands is very significant... More>>


Insurance Council of New Zealand: September South Island Windstorm Cost $36.5 M Raises 2021 Extreme Weather Claims Total To $321.6 M

Gale force winds and storms between 9 and 13 September 2021 resulted in insurers supporting communities to the tune of $36.5 m. This is a significant rise, of $16.7 m, on preliminary figures for the event and lifts the end of year total for all extreme weather events in 2021 to $321.6 m... More>>


Statistics: Building Consents Hit New Highs In November
There were a record 48,522 new homes consented in the year ended November 2021, Stats NZ said today. This was up 26 percent compared with the year ended November 2020... More>>

Fonterra: Revises Milk Collection Forecast
Fonterra Co-operative Group Limited today revised the forecast for its 2021/22 New Zealand milk collections to 1,500 million kilograms of milk solids (kgMS), down from its opening forecast of 1,525 million kgMS... More>>