MDCECIL-L Archives

Archiver > MDCECIL > 2002-09 > 1033435729


From: "Robert Wilson" <>
Subject: [MDCECIL] Fw: [VIRUS] Virus warning <new>
Date: Mon, 30 Sep 2002 18:29:06 -0700


I know the list managers don't like virus warnings on the list because you can't
get a virus from the list but this one is moving fast and I think its worth posting.

Symantec and McAfee updates dated 9/30/02 provide protection from this virus
Since I updated my AV this morning, I have received three letters with the virus
attached

Robert (Bob) Wilson

----- Original Message -----
From: "Dan M" <>
To: <>
Sent: Monday, September 30, 2002 9:22 AM
Subject: Re: [VIRUS] Virus warning <new>


: · Virus name: W32/BugBear-mm, also know as Tanat
:
: · Number of copies seen so far: 1200+
:
: · Time & Date first Captured: 29 September 2002, 20:23 GMT
:
: · Origin of first intercepted copy: Malaysia
:
:
: Technical Details
:
: Subject: variable; may well be based on an existing emails.
: Text: variable; as above
: Attachment: filename is variable, but always has the file size of 50688
: bytes.
:
:
: Virus Behaviour
:
: The virus is a mass-mailing virus, which can propagate using the MIME-020
: vulnerability.
:
: >>>LOOK at this part>>>>>>.
: BugBear also appears to have the ability to disable or disarm AV software.
: >>>>>>>>>
:
: Payload
:
: The virus appears to contain a key-logging Trojan. This potentially could
: be used to steal passwords and credit-card details.
:
: Comment
:
: Skeptic detected the virus heuristically
:
: ============
: See my website click Virus Eye
:
: Dan
: see for virus help
: http://www.wvi.com/~wb/VirusHelp.html
:
:


This thread: