Computing.Net > Forums > Security and Virus > bugbear virus, do i have it?

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

bugbear virus, do i have it?

Reply to Message Icon

Name: Vic
Date: October 7, 2002 at 19:51:06 Pacific
OS: win98
CPU/Ram: pIII 500
Comment:

hi, i've been reading a lot about the bugbear virus. how do i know if my pc is infected? I've read that it disables Norton AV and firewalls so it wont be detected. i have Norton 2002 which i update every week(is that enough?) and i also run zonealarm. i'd appreciate any help, thanks in advance. vic.




Sponsored Link
Ads by Google

Response Number 1
Name: w
Date: October 7, 2002 at 20:05:40 Pacific
Reply:

if you can run nav, chances are you're not infected, since it disables nav, and any other antivirus.
if you want to doublecheck nav try running
an online scan at http://housecall.antivirus.com
disable auto protect while doing an online scan to avoid false detections by nav, from the virus definition strings used by housecall.


0

Response Number 2
Name: The Sage
Date: October 7, 2002 at 20:07:26 Pacific
Reply:

If you use the Windows Update from Microsoft you don't have to worry. The Bug Bear controller was patched about six months ago...before bug bear came out...Do you Update?


0

Response Number 3
Name: Vic
Date: October 7, 2002 at 20:28:28 Pacific
Reply:

no, unfortunately not. i didn't realize it could actually help me with something that important, i thought it was just for newer features that i really don't need.
but i will definitely do it now as soon as i confirm that my pc's not yet infected. thanks a lot guys.


0

Response Number 4
Name: trustedzero
Date: October 7, 2002 at 21:00:03 Pacific
Reply:

If you have ever experianced a virus in which disables AV software, you can completely tell. If Norton has been disabled, it makes a mess of norton and you get errors, and it wont open, and your comp runs slow etc. etc. etc. Anyways, I dont know if this is true for this bugbear virus since I haven't had to deal with it so far (knock on wood) but, anyways with earlier experiences with melicious viruses like bug bear, that is what the code does to norton AV.
--trustedzero


0

Response Number 5
Name: Xena
Date: October 7, 2002 at 22:11:52 Pacific
Reply:

I ran into W32 Bugbear in an email attachment, Norton caught it and quarantined it. Submitted it to SARC. It was in the form of an email attachment called:

Best of the Web.url.pif

Have Norton 2002 and it did quarantine same. Have had no problems since, my mem check is within normal limits, it is memory resonant, size stealth, stealth, encrypting, polymorphic, full stealth, and a triggered event.

Will Do house call.

Hope this helps!!!!!!!!!


0

Related Posts

See More



Response Number 6
Name: Xena
Date: October 7, 2002 at 22:12:39 Pacific
Reply:

Also, u should do live update on Norton daily or more!!!!!!!!!!


0

Response Number 7
Name: Steve
Date: October 8, 2002 at 09:32:10 Pacific
Reply:

I thought Norton only updated the virus definitions once a week, and you can download them starting Wednesday every week...


0

Response Number 8
Name: John
Date: October 8, 2002 at 09:38:22 Pacific
Reply:

I just removed the Bugbear from a customer's PC.

First thing I noticed was the fact that when the PC booted the icon for NAV would show up in the Systray then vanish.

When trying to run NAV the HD would grind away then just not open the software.

The PC seemed to run fine. I found the virus by running a process viewer and noticing some odd files running silent in the background.

The virus only infected 3 files on the PC yet stoped the PC from being able to recieve e-mail, and run some simple programs.

As long as your antivirus software is running and up to date I dont think you would be infected by the virus.


0

Response Number 9
Name: sue
Date: October 8, 2002 at 10:26:44 Pacific
Reply:

Steve,
If you use live update, it's updated every week, usually wednesday. However, you can go to the symantec website any time and update your virus defs via intelligent updater. HTH


0

Response Number 10
Name: Gump
Date: October 14, 2002 at 18:57:20 Pacific
Reply:

I also had to remove Bugbear from a computer and the symptoms John described above were the same... dissapearing icon, disabled email. One other thing - after having Norton Antivirus close several times while trying to scan, I booted to Safe Mode and Norton was able to scan my hard drive without closing before it was done. Here's the kicker - Norton pronounced the computer free of viruses. The only way I found it (Bugbear) was by downloading a free trial of F-Prot and using it to scan. My advise is to do the same if you are unsure.


0

Response Number 11
Name: Peggy
Date: October 15, 2002 at 09:16:06 Pacific
Reply:

I use AVG anti-virus. Today after they automatically downloaded the newest updates I got the message that no viruses were detected. When I re-started my computer I got a big red message that bug bear had been detected in my start-up programs file but it will not let me heal it. What should I do? I have emailed AVG today and so far have not heard from them. PLEASE HELP!


0

Response Number 12
Name: jez
Date: October 15, 2002 at 23:16:48 Pacific
Reply:

I had a whole load of crazy files and directories in windows\temp with dates like 1941 etc...

There were also a lot of recent .exe files
when I did a search for new files.

My computer won't run now, I'm using a mates.

Not sure how to get it going, I just get
the windows wallpaper but no windows, I'm
using win 98 original. I can't even get
to a dos prompt...

Any helpful suggestions?


0

Response Number 13
Name: saleel
Date: October 16, 2002 at 00:27:53 Pacific
Reply:

mine is different case, I tried to remove bugbear with norton & MacAfee tools, but didn't find any. But some of my networked printers printing garbage today also @ 8:00 AM. Yesterday it was @ 7:15 AM. All printing starts at same moment. why? please give some soln, if u anybody have some! Thanx.


0

Response Number 14
Name: Ice
Date: October 16, 2002 at 06:14:18 Pacific
Reply:

The best way to avoid getting any virus is to disable and/or remove Outlook or Outlook Express. Use something which has a bit of protection built in, such as The Bat!


0

Sponsored Link
Ads by Google
Reply to Message Icon

Established connection po... Norton Firewall 2003



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: bugbear virus, do i have it?

SoBig Virus - Do I have it? www.computing.net/answers/security/sobig-virus-do-i-have-it/6225.html

Do I have whataboutadog.com virus? www.computing.net/answers/security/do-i-have-whataboutadogcom-virus/21773.html

do i have a virus www.computing.net/answers/security/do-i-have-a-virus/18724.html