w32bugbear virus

[ausputergeek]

I keep finding the w32bugbear virus in the spool folder on a peer to peer shared pc. The only place that this virus turns up is in spool files. I have conducted numerous system scans over the past week or so. It doesn't turn up anywhere else.

Any body have any suggestions??

 

[ReddLefty]

From the Symantec Site:
"W32.Bugbear@mm is a mass-mailing worm. It can also spread through network shares. It has keystroke-logging and backdoor capabilities. The worm also attempts to terminate the processes of various antivirus and firewall programs.

Because the worm does not properly handle the network resource types, it may flood shared printer resources, which causes them to print garbage or disrupt their normal functionality."

You must be getting the virus threw the network. Someone is infected and is sending garbage to your printer, hence, your spooler gets loaded with junk. You need to find the source of your problem. Check who is connected on your server when the problem occurs and eventually you'll narrow it down to who is infected.



"In space, nobody can hear you click..."