Ironworks Gaming Forum

Ironworks Gaming Forum (http://www.ironworksforum.com/forum/index.php)
-   General Conversation Archives (11/2000 - 01/2005) (http://www.ironworksforum.com/forum/forumdisplay.php?f=28)
-   -   Virus Alert- BugBear (http://www.ironworksforum.com/forum/showthread.php?t=81642)

Ladyzekke 10-04-2002 03:28 PM

Sigh, yet another worm virus is out. Usually I fight Bugbears in games, guess we all gotta watch out for them now in our e-mails!

Here is the Info:

It sounds cute and cuddly, but the latest Windows worm is really a monster.

Unlike other recent e-mail-borne maladies that simply clogged inboxes and networks, the Bugbear worm, also known as Tanatos, is coded to allow a malicious hacker complete control over infected computers.

Infected machines can be entered remotely through an application that allows the attacker to execute programs and view, copy, alter or delete any information stored on the infected computer.

The worm also has other data-stealing capabilities. It installs a program on an infected system that records all keystrokes and saves them into a file.

The worm then sends this file, which attackers obviously hope will contain passwords and other sensitive data, to a few e-mail addresses that are stored in encrypted form in the worm's code.

Bugbear was first spotted Monday. It infects only PCs running Windows operating systems, spreading through infected e-mail attachments. On computers that have not been patched (http://www.microsoft.com/windows/ie/...08/default.asp) for Internet Explorer's IFRAME vulnerability, the attachment can be executed automatically by Outlook as soon as an infected e-mail is previewed or read.

Bugbear also spreads quickly through computer networks once one connected machine is infected.

It's not easy to identify Bugbear. The worm arrives in e-mail bearing assorted subject headers. The name of the infected attachment can also vary but nearly always has the file size of 50,688 bytes.

Some of Bugbear's side effects are simply malicious and are probably due to a programming error in the worm's code -- the worm sometimes prints out hundreds of pages of nonsense text or its own binary code when a network that includes printers has become infected.

Bugbear also can pick up old e-mail messages stored on an infected system and send them to random addresses. This means that private e-mail could be disclosed to third parties.

The worm also attempts to shut down antivirus and firewall programs.

Some antiviral application vendors have released free tools to purge systems of the worm



More detailed info can be found at: http://www.f-secure.com/bugbear/

Ronn_Bman 10-04-2002 03:33 PM

Thanks for the heads up!

Did you get your PM? I got the second book. Thanks again.

Kaltia 10-04-2002 03:33 PM

Thanks for the warning, ladyZekke. Have just updated Norton, not usre if it knows about the worm, but hey.

Attalus 10-04-2002 03:40 PM

I never open attachments. That's the safe thing to do, I guess. <font color=lavender>Galadria</font> goes nuts when I go thruogh a whole list of 100+ emails and delete them all, without even reading them. I don't have that many people that I want to talk to. :D

johnny 10-04-2002 03:45 PM

Yep, i heard about this one, very disturbing thing.

/)eathKiller 10-04-2002 03:46 PM

Why on earth woudl I want to open up an E-mail about Bugbears anyway? And Tanatos! What kind of name is that for a WORM? If you're going to name it something call it "Plunchit" or "BeeHammer" or something...

Mouse 10-04-2002 04:05 PM

Had a couple of infected e-mails this morning. PC-cillin zapped them without too much fuss [img]graemlins/thumbsup.gif[/img]

Lord Shield 10-04-2002 04:24 PM

had one or two myself but Norton popped them no worries :D

Mack_Attack 10-04-2002 05:40 PM

Thanks for the warning. I have norton I would hope that it would pick it up. I better go do a update just incase.

LennonCook 10-04-2002 06:03 PM

Bugbear Removal Tool


All times are GMT -4. The time now is 07:27 AM.

Powered by vBulletin® Version 3.8.3
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.
©2024 Ironworks Gaming & ©2024 The Great Escape Studios TM - All Rights Reserved