Forum Archive Index - October 2002

["andrew cottingham" <arco@adinfinitum.co.nz>]

The Norton site gives  comprehensive information on this virus

http://securityresponse.symantec.com/avcenter/venc/data/w32.bugbear@mm.html



----- Original Message -----
From: <tennyson@caverock.net.nz>
To: <sharechat@sharechat.co.nz>
Sent: Friday, October 04, 2002 10:18 AM
Subject: Re: [sharechat] virus


> Hi davida,
>
> >
> >I do have virus protection that is updated every 3 days which I
> >think is a fairly responsible and reasonable level of
> >protection, however it has now been modified to daily updates.This
> >is still not foolproof as most virus companys took a day to
> >recognise and make an update available.
> >
> >
>
> OK, I accept that you were caught out and have now modified your
> procedures so that the chances of it happening again have been
> severely reduced.   I think that is a reasonable response to what
> happened.
>
> >
> >
> >The virus that hit put several thousands of computers out worldwide.
> >Your adress is not in my address book ,only the sharechat address as
> >listed above.There are only 15 addresses in my address book in
> >total.
> >If  am indeed at fault I do apologise .
> >
> >
>
> I've done a bit more homework, and it would seem this virus is
> possibly called 'bugbear'.
>
> http://www.cnet.com/software/0-7760531-8-20478035-1.html?tag=txt
>
> The brief is:
>
> "Bugbear arrives via e-mail with no distinct characteristics except
> for an attached file that is always 50,688 bytes long. The
> subject line and text may be taken from existing e-mail."
>
> "The Trojan horse part of this worm first terminates many popular
> firewall and antivirus programs."
>
> I've got to admit this seems to be a rather nasty virus.  I haven't
> heard of a virus that picks an address from a stored e-mail
> that is not part of your address book before.  So I apologise for
> suggesting my name was in your address book for spamming purposes.
> It would seem I've learned something today too.
>
> And now, back to shares ....
>
> SNOOPY
>
>
>
>
> ---------------------------------
> Message sent by Snoopy
> e-mail  tennyson@caverock.net.nz
> on Pegasus Mail version 2.55
> ----------------------------------
> "You can tell me I'm wrong twice,
> but that still only makes me wrong once."
>
> --------------------------------------------------------------------------
--
> To remove yourself from this list, please use the form at
> http://www.sharechat.co.nz/chat/forum/
>
>


----------------------------------------------------------------------------
To remove yourself from this list, please use the form at
http://www.sharechat.co.nz/chat/forum/