FFBX System Safety Center

W32.Bugbear.E@mm is a mass-mailing worm that installs a keylogger to steal personal information. The worm is similar to W32.Bugbear.C@mm.

The following list of words can be used in the "From" field of the email:

accounts, adam, adrian, agency, agree, alan, albert, alex, alexander, alfred, alice, alicia, alison, alive, allen, ally, andre, andrea, andreas, andres, andrew, andy, angela, angelo, anger, anita, ann, anna, anne, another, answer, anthony, anton, antonio, archives, ask, back, balance, bank, base, beach, beatrice, beauty, becky, bell, bernard, bernhard, best, bill, blue, bob, body, bonny, book, boris, brain, brandon, brave, brenda, brent, brian, bridge, brother, bruce, bruno, calvin, cards, carina, carlos, carol, caroline, catherine, center, check, chris, christine, christoph, christopher, cindy, claude, claudia, colin, collins, company, contact, customerservice, dan, dana, daniel, daniela, dark, dave, david, debby, denis, denise, dennis, deny, diana, diane, doctor, dominic, dominik, don, donna, doug, douglas, dsmith, e-gold, earth, ecommerce, ed, eduardo, elizabeth, ellen, emmanuel, eric, erica, erich, erick, erik, erika, ernst, eva, evan, even, felix, fernand, fill, finance, francisco, franco, frank, franz, fred, frederic, funds, gabriele, garry, gary, georg, george, gerald, gerard, gerhard, gerry, glenn, gold, gordon, gray, greg, gregor, gregory, hans, harald, harbor, harrison, heinz, helen, helene, helga, helmut, help, helpdesk, henrik, henry, herbert, herman, hermann, hernan, howard, ian, info, ingrid, irene, irina, iron, isaac, jack, james, jan, jane, janet, janice, janna, janne, jason, jennifer, jerome, jerry, jill, jim, jimmy, job, jody, joe, johan, johann, johannes, john, jon, jonathan, jorge, jorgen, jose, josef, joseph, josh, jsmith, judge, judy, juerg, juergen, juhani, julia, julie, julien, julio, justin, karen, karin, karl, kathleen, kathryn, kathy, katri, katrin, katy, kelly, ken, kendra, kenneth, kerry, kevin, kimberly, kontakt, krista, kristin, kristine, kurt, larry, laura, laurence, lawrence, lena, leo, leonardo, leopold, linda, lisa, lucia, luck, luis, mad, mail, manuel, marc, marco, marcus, margareta, margaretha, marge, margit, maria, marianna, mariano, marie, marina, mario, marion, mark, market, marketing, markus, martin, mary, mathias, mati, matt, matthew, matti, maureen, maurizio, mauro, melania, melanie, member, metal, michael, michaela, michel, miguel, mike, molly, monica, nadine, nancy, netbank, news, nick, nicola, nicolas, nicole, nina, norbert, ole, oliver, pamela, paolo, patrice, patricia, patrick, paul, paulo, pedro, peter, questions, race, rachel, ralf, ralph, randy, ray, ricardo, rich, rick, rita, rob, robbie, robert, roberto, roger, roland, rolf, roll, ronald, rsmith, rubber, rudolf, russell, ruth, ryan, sabina, sabine, sam, sandra, scott, serg, serge, service, sharon, silver, silvia, simon, smith, sophie, stan, stefan, stefano, stephane, stephen, steve, steven, support, susan, sylvia, ted, terri, terry, thomas, tim, tina, tobias, todd, tom, tomas, toni, tony, uwe, vanessa, vincent, vladimir, voice, wagner, walter, wendy, werner, william, wolfgang

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Medium

Distribution

• Distribution Level: High