Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
hi, i've been reading a lot about the bugbear virus. how do i know if my pc is infected? I've read that it disables Norton AV and firewalls so it wont be detected. i have Norton 2002 which i update every week(is that enough?) and i also run zonealarm. i'd appreciate any help, thanks in advance. vic.

if you can run nav, chances are you're not infected, since it disables nav, and any other antivirus.
if you want to doublecheck nav try running
an online scan at http://housecall.antivirus.com
disable auto protect while doing an online scan to avoid false detections by nav, from the virus definition strings used by housecall.

If you use the Windows Update from Microsoft you don't have to worry. The Bug Bear controller was patched about six months ago...before bug bear came out...Do you Update?

no, unfortunately not. i didn't realize it could actually help me with something that important, i thought it was just for newer features that i really don't need.
but i will definitely do it now as soon as i confirm that my pc's not yet infected. thanks a lot guys.

If you have ever experianced a virus in which disables AV software, you can completely tell. If Norton has been disabled, it makes a mess of norton and you get errors, and it wont open, and your comp runs slow etc. etc. etc. Anyways, I dont know if this is true for this bugbear virus since I haven't had to deal with it so far (knock on wood) but, anyways with earlier experiences with melicious viruses like bug bear, that is what the code does to norton AV.
--trustedzero

I ran into W32 Bugbear in an email attachment, Norton caught it and quarantined it. Submitted it to SARC. It was in the form of an email attachment called:
Best of the Web.url.pif
Have Norton 2002 and it did quarantine same. Have had no problems since, my mem check is within normal limits, it is memory resonant, size stealth, stealth, encrypting, polymorphic, full stealth, and a triggered event.
Will Do house call.
Hope this helps!!!!!!!!!

I thought Norton only updated the virus definitions once a week, and you can download them starting Wednesday every week...

I just removed the Bugbear from a customer's PC.
First thing I noticed was the fact that when the PC booted the icon for NAV would show up in the Systray then vanish.
When trying to run NAV the HD would grind away then just not open the software.
The PC seemed to run fine. I found the virus by running a process viewer and noticing some odd files running silent in the background.
The virus only infected 3 files on the PC yet stoped the PC from being able to recieve e-mail, and run some simple programs.
As long as your antivirus software is running and up to date I dont think you would be infected by the virus.

Steve,
If you use live update, it's updated every week, usually wednesday. However, you can go to the symantec website any time and update your virus defs via intelligent updater. HTH

I also had to remove Bugbear from a computer and the symptoms John described above were the same... dissapearing icon, disabled email. One other thing - after having Norton Antivirus close several times while trying to scan, I booted to Safe Mode and Norton was able to scan my hard drive without closing before it was done. Here's the kicker - Norton pronounced the computer free of viruses. The only way I found it (Bugbear) was by downloading a free trial of F-Prot and using it to scan. My advise is to do the same if you are unsure.

I use AVG anti-virus. Today after they automatically downloaded the newest updates I got the message that no viruses were detected. When I re-started my computer I got a big red message that bug bear had been detected in my start-up programs file but it will not let me heal it. What should I do? I have emailed AVG today and so far have not heard from them. PLEASE HELP!

I had a whole load of crazy files and directories in windows\temp with dates like 1941 etc...
There were also a lot of recent .exe files
when I did a search for new files.My computer won't run now, I'm using a mates.
Not sure how to get it going, I just get
the windows wallpaper but no windows, I'm
using win 98 original. I can't even get
to a dos prompt...Any helpful suggestions?

mine is different case, I tried to remove bugbear with norton & MacAfee tools, but didn't find any. But some of my networked printers printing garbage today also @ 8:00 AM. Yesterday it was @ 7:15 AM. All printing starts at same moment. why? please give some soln, if u anybody have some! Thanx.

The best way to avoid getting any virus is to disable and/or remove Outlook or Outlook Express. Use something which has a bit of protection built in, such as The Bat!

![]() |
Established connection po...
|
Norton Firewall 2003
|

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |