Hobbit posing as Bugbear cleaner

[Pieter_Arntz]

Written in Visual Basic, this virus attempts to spread by mailing itself to email addresses extracted from the temporary internet files, and sharing itself using the KaZaa peer-to-peer file sharing network. The original source code has been released, leading to multiple compilations of this virus.

This worm arrives as in an email message containing the following information:

Subject: AntiVirus Updates:
Body: A Removal to scan for the new BugBear Virus. Recommended by%senders name% (note there is no space after the word "by")

http://vil.mcafee.com/dispVirus.asp?virus_k=99739

Regards,

Pieter