W32.Bugbear.B@mm is a variant of W32.Bugbear@mm and appears to be spreading quickly. W32.Bugbear.B@mm is a mass-mailing worm that also spreads through network shares. The worm is polymorphic and also infects a select list of executable files. The worm has keystroke-logging and backdoor capabilities and also attempts to terminate the processes of various antivirus and firewall programs.
Symantec Security Response has rated W32.BugbearB@mm a level 4 worm, on a scale of 1-5, with five being the most serious. As of midnight PDT on June 5, Security Response has seen the average number of submissions double every hour, with 75% of the total submissions coming from Europe, and 23% coming from the United States. The remaining few submissions are coming from the Asia Pacific region.
Symantec urges users to download definitions that have been posted to the Symantec Security Response Web site and are as available through LiveUpdate.
Worldwide, Symantec Security Response has received 180 submissions from consumer users, and 51 submissions from corporations.
If you'd like to talk with Symantec or need additional information, please contact Zubeir Shah on 011 797 6628.

