[unisog] BugBear Worm

Patrick Darden darden at armc.org
Fri Oct 4 12:06:16 GMT 2002

We've received it, albeit with no damage due to current antivirus
definition files.

--Patrick Darden                Internetworking Manager             
--                              706.475.3312    darden at armc.org
--                              Athens Regional Medical Center

On Thu, 3 Oct 2002, Bill Martin wrote:

> Has anyone encountered this beast yet?
> ISS X-Force claims to be monitoring the spread of the "Bugbear" Internet worm. It propagates through email and through open NetBIOS file shares, attempts to disable all security and antivirus software on each host
> and installs a backdoor program. They claim to have detected a large increase in NetBIOS scanning traffic from several thousand unique addresses. 
> For more, check out:
> http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21301 
> -Bill Martin-
> Sr. Systems Analyst
> Loyola University Chicago
> bmartin at luc.edu

More information about the unisog mailing list