** Heads Up: BUGBEAR.E

Hi Guys,

Quote:

---

Symantec Security Response has discovered a new worm of the Bugbear family, W32.Bugbear.E@mm. We are currently analyzing the worm and will post more information soon.

---

Currently only a Cat 2 with Symantec..

Information found here:

Symantec

Thanks for the heads up Und3ertak3r.

Looks like Symantec got the jump on everyone this time- I don't see any info on this on any of the other vendor sites at this time.

Is it just me, or is anyone else getting tired of just getting new variants of the same three or four viruses- mydoom, bagle, netsky, sober, bugbear. Not that I am looking for a huge new outbreak or anything that will have me working 20 hour days to mitigate, but a change of pace would be nice. :-)

There is a convinving hoax going around through email, that directs you to delete jdbgmgr.exe. The reason it's convincing is because the jdbgmgr.exe icon is of a bear.(bugbear). But, it's only a java debugger. (bugbear)

Nothing I have found in regards to online docs have shown this to be harmful except for someone that uses java.

The teddy bear hoax is completely separate from the Bugbear virus family.

The jdbgmgr.exe teddy bear hoax is years old but keeps coming back. Here are some links regarding this persistent pest:

http://www.f-secure.com/hoaxes/jdbgmgr.shtml

http://www.snopes.com/computer/virus/jdbgmgr.htm

http://www.symantec.com/avcenter/ven...file.hoax.html

http://hoaxinfo.com/jdbgmgr.htm

http://urbanlegends.about.com/librar...gmgr-virus.htm

http://www.vmyths.com/hoax.cfm?id=275&page=3

Here is an article I wrote recently about hoax and chain letter spam email: Horrible, No-Good, Nasty, Worst-Ever Virus

Sophos have finaly announced a version.. While they call it Bugbear.g it is the AKA for the E version mentioned here.. more info check the link below..

http://www.sophos.com/virusinfo/anal...2bugbearg.html

I'm off chasing a Sasser young lass

cheers