Madrid, April 6 2004 - PandaLabs has detected the appearance of the new 'C'
variant of the Bugbear worm. Given the enormous propagation of its
predecessor, Bugbear.B, in June 2003, and in order to prevent incidents with
the new variant, users are advised to treat all e-mails received with
caution.
Bugbear.C is a worm that is sent out by e-mail to all addresses it finds in
the Outlook address book of the infected computer, as well as those that it
finds in files with the following extensions: .ODS, INBOX, .MMF, .NCH, .MBX
.EML, .TBB, and .DBX. The message that carries the worm has the following
characteristics:
- The subject field has one of the following texts:
Hello!
update
hmm..
Payment notices
Just a reminder
Correction of errors
history screen
Announcement
various
Introduction
Interesting...
I need help about script!!!
Stats
Please Help...
Report
Membership Confirmation
[Fwd: look] ;-)
Today Only
New Contests
Lost & Found
bad news
wow!
fantastic
click on this!
Market Update Report
empty account
My eBay ads
Cows
25 merchants and rising
CALL FOR INFORMATION!
new reading
Sponsors needed
SCAM alert!!!
Warning!
its easy
free shipping!
News
Daily Email Reminder
Tools For Your Online Business
New bonus in your cash account
Your Gift
Re:
good news!
Your News Alert
Hi!
!!! WARNING !!!
- It has an attachment with either a .zip or .htm extension.
Bugbear.C terminates security programs -including antivirus solutions- and
stops them from running, in both PCs and corporate environments, leaving
victims defenseless against further attack from other threats.
Due to the risk of being infected by Bugbear.C, Panda Software advises users
to treat all e-mails received with caution and to keep their antivirus
software updated. The company has already made the updates to its products
available to its clients to ensure their solutions can detect and eliminate
this worm. Similarly, users can also detect and disinfect these and other
malicious code using the free, online antivirus, Panda ActiveScan, which is
also available on the company's website at
http://www.pandasoftware.com.