Not directly affected

• MacOS versions prior to MacOS X 10.x
• Unix (including *BSD, Linux, MacOS X 10.x)

For the impatient

MANUALLY UPDATE YOUR ANTIVIRUS DEFINITIONS NOW.

Description

• Installs a trojan that logs keystrokes with the aim of collecting remote system passwords. This is potentially serious because it can lead to remote system compromises.
• Sends large junk jobs to network printers.
• Opens network port 36794. Physics has been scanned for computers with this network port open but fortunately none could be found---this does not indicate Physics is free of this virus or will not be attacked, however.
• If a PC is infected before anti-virus software detects it, the virus disables anti-virus processes running on the infected PC .

Action

It should go without saying that USERS SHOULD NOT OPEN ATTACHMENTS CONTAINED IN UNSOLICITED E-MAIL.

More information

• http://securityresponse.symantec.com/avcenter/venc/data/w32.bugbear@mm.html

---------- Forwarded message ----------
Date: Tue, 1 Oct 2002 14:13:08 +1000
From: Russell Bastock
To: virus-info@explode.unsw.edu.au
Subject: VIRUS ALERT - Bugbear & Opaserv viruses

Please update your Norton AntiVirus (NAV) definitions immediately as follows:

1. Open NAV by double-clicking the yellow shield icon at the bottom
right corner of your computer screen. If this is missing, go to the
Start menu and select Programs > Norton AntiVirus
Corporate Edition > Norton AntiVirus Corporate Edition

2. Look at the date above the LiveUpdate button, if it is not 30/9/02
or 09/30/02 you will have to update your virus definitions as follows;

3. Click the 'LiveUpdate' button, then the 'Next' button then follow
any prompts to allow the LiveUpdate process to complete. Illustrated
instructions are found at the end of the NAV installation manual at
http://www.acsu.unsw.edu.au/soft_dist/anti_virus/reference/norton/NortonCE_install.pdf