Download

McAfee Bugbear Removal Tool

  • Last update: 20 Apr 2005
  • License: Freeware
  • Size: 653KB
  • Downloads: 2013

The McAfee Bugbear Removal Tool helps you detect and remove any variation of the Bugbear virus from your computer.

Based on the award-winning McAfee VirusScan engine, the Bugbear Removal Tool searches for and deletes variants of the Bugbear virus, including any file infected by the virus payload.

Features of McAfee Bugbear Removal Tool :

· Deletes all Bugbear-related services
· Removes any registry entries that were created by Bugbear
· Terminates all processes that are associated with the Bugbear virus
· Detects and removes all types of Bugbear infections

What is Bugbear?

The Bugbear virus attempts to stop several services that are running on the infected computer, including those that are used by McAfee VirusScan and Norton AntiVirus as well as other anti-virus and firewall products. Windows services are individual processes that might be running in Windows, and these are not visible to the end user. Bugbear has the ability to spoof, or forge, the From: field (often set to an address found on the victim's machine). The virus can also use a fabricated sender address, by taking the name before the "@" sign of one address, and the domain name after the "@" sign of another address (for example: name1@domain1.com + name2@domain2.com = name1@domain2.com).

This worm e-mails itself to addresses found on the local system. The virus code contains e-mail subject strings and attachment names. A high probability exists that the virus will use words and filenames contained on the infected system. This virus can find a network printer and send a print job to it that contains over 600 pages of garbage. The virus payload is in turn another virus called PWS-Hooker.dll (an alias of W32/BadTrans@MM), which is a worm that loads a Trojan horse upon system startup. The trojan contains a keylogger program capable of capturing other vital information such as credit card and bank account numbers and passwords.

Rating: None (0 votes) Comments:

write comment all comments