Forum Home
Press F1
 
Thread ID: 25561 2002-10-07 01:41:00 Additional Outlook Express Fix for BugBear Chilling_Silence (9) Press F1
Post ID Timestamp Content User
86655 2002-10-07 01:41:00 I received this email from Ihug, It contains the URL for information on the fix that prevents files from automatically being loaded when previeing a message. It helped me coz I had deleted the preview pane, but I've since brought it back!

Dear Ihug Customer,
Please be aware there's a new virus on the loose called bugbear, (aka
Tanatos, W32/Bugbear, Tanat, W32/Tanat, I-Worm.Tanatos, I-Worm/Keywo) whew!
Here's some useful information regarding this virus and steps on how you can
remove it if you get infected.

You best get i-Spy:
Remember prevention is always better than a cure! Sign up for our virus
protection now: www.ihug.co.nz

Technical virus info jargon:
Bugbear worm's file is a PE EXE (portable executable), 50688 bytes long
and it is compressed with UPX file compressor. The worm spreads in e-mail
messages as an attachment with randomly-generated names and with one or more
extensions. Subjects and bodies of infected e-mails are also different.
The worm's messages can contain IFrame exploit that allows it to run
automatically on some computers when an infected e-mail is viewed (for
example, with Outlook and IE 5.0 or 5.01).

Email patch:
This vulnerability is fixed and a patch for it is available on Microsoft
site:
www.microsoft.com

What it may look like:
Bugbear can pick up e-mail messages from infected user's databases and
send them out with its copy attached. It can place contents of a random text
file from an infected hard drive to an infected message's body. The worm can
send itself in a message with one of the following subjects - click below -
www.ihug.co.nz

For Disinfection Instructions - click below -
www.ihug.co.nz
Chilling_Silence (9)
86656 2002-10-07 02:07:00 Hey Chill,
Hopefully you don't shoot the messenger up there where you come from but the microsoft.com page listed above just led to a 404
M$ were very polite about it though.

"Our Apologies...
The page you are looking for no longer exists."
Chris Wilson (431)
86657 2002-10-07 02:12:00 Chris, Chill,
It's here IE55Patch (support.microsoft.com)

Babe.
Babe Ruth (416)
86658 2002-10-07 02:18:00 *Feels sorry for Ihug mailing a link that expried after only 1 1/2 days!* Chilling_Silence (9)
86659 2002-10-07 02:19:00 Ooops, One more thing... I had IE and OeX 6?! Why'd it still do it? Chilling_Silence (9)
1