https://www.proz.com/forum/kudoz/11885-bugbear_in_a_message_from_prozcom_staff_no.html

Bugbear in a message from ProZ.com? (Staff: 'no')
Thread poster: Amy Duncan (X)
Amy Duncan (X)
Amy Duncan (X)  Identity Verified
Brazil
Local time: 19:13
Portuguese to English
+ ...
Jun 16, 2003

I got an e-mail from ProZ today with the bugbear virus in the attachment. Fortunately, Norton caught it...but beware those of you whose anti-virus programs may not be up to date. This was a general message that was probably sent out to a lot of people.

 
Henry Dotterer
Henry Dotterer
Local time: 18:13
SITE FOUNDER
The message was forwarded, the address spoofed Jun 16, 2003

Bugbear infests Windows-based systems. Since ProZ.com runs Linux systems, and does not mail attachments, you must have received the virus from a ProZ.com user who is now infected. The "from" address--the ProZ.com address--was spoofed. That's what bugbear does; this is a common occurrence.

If you ever get an attachment in an email apparently from ProZ.com, don't open it. And yes, everyone should keep their virus protection up to date.


 
Ralf Lemster
Ralf Lemster  Identity Verified
Germany
Local time: 00:13
English to German
+ ...
More background Jun 16, 2003

For more details on how Bugbear and related worms (technically, Bugbear isn't a virus, but a mass-mailing worm, but that doesn't make it less nasty...), check out info pages posted by providers of antivirus software, e.g. by Symantec. Quoting from there:


Mass-mailing routine
When the mass-mailing routine runs, it does the following:

...

3. Uses its own SMTP engine to send itself to all the email addresses it finds. As part of the routine, the worm spoofs the From: address.


Best regards, Ralf


 
Csaba Ban
Csaba Ban  Identity Verified
Hungary
Local time: 00:13
Member (2002)
English to Hungarian
+ ...
Also here Jun 19, 2003

I just received a KudoZ question (Eng-Hun, http://www.proz.com/kudoz/402989), and Norton noticed that the message was infected by BugBear.
Csaba


 
Ralf Lemster
Ralf Lemster  Identity Verified
Germany
Local time: 00:13
English to German
+ ...
Please read the background info Jun 19, 2003

Hi Csaba,
I just received a KudoZ question (Eng-Hun, http://www.proz.com/kudoz/402989), and Norton noticed that the message was infected by BugBear.

Today's KudoZ questions have question IDs around 461xxx - the notification you got is quite apparently an old one. As was pointed out numerous times already, current mass mailing worms use messages found on an infected system and combine them with a random choice of sender and recipient addresses.

Regards, Ralf


 


To report site rules violations or get help, contact a site moderator:


You can also contact site staff by submitting a support request »

Bugbear in a message from ProZ.com? (Staff: 'no')






Wordfast Pro
Translation Memory Software for Any Platform

Exclusive discount for ProZ.com users! Save over 13% when purchasing Wordfast Pro through ProZ.com. Wordfast is the world's #1 provider of platform-independent Translation Memory software. Consistently ranked the most user-friendly and highest value

Buy now! »
Protemos translation business management system
Create your account in minutes, and start working! 3-month trial for agencies, and free for freelancers!

The system lets you keep client/vendor database, with contacts and rates, manage projects and assign jobs to vendors, issue invoices, track payments, store and manage project files, generate business reports on turnover profit per client/manager etc.

More info »