Q

How Bugbear bugs printers

I understand that Bugbear attacks printer spooling on shared resources. I run several different HP print appliances...

for printing. Even though the shared device was not installed or mapped on the infected computer, all six of my hubs were hit, because all printers 100+ starting printing garbage sent by Bugbear. How was this done?


I posed this question to my friends in the Anti-Virus Information Exchange Network (www.avien.org), as I've not had a chance to play much with this new critter yet.

The short answer is that the printers/print servers appear in the Windows Network Neighborhood. One thing rarely mentioned in virus/worm descriptions is that some worms use the Network Neighborhood as their invasion map for a corporate network. The antivirus vendors typically only mention "Mapped Drives" in their descriptions.


For more information on this topic, visit these other SearchSecurity.com resources:
News & Analysis: Guard against Bugbear using these tips
News & Analysis: Bugbear capitalizing on new malicious techniques
Featured Topic: Virus update: Bugbear


This was last published in October 2002

Dig Deeper on Malware, Viruses, Trojans and Spyware

PRO+

Content

Find more PRO+ content and other member only offers, here.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.

-ADS BY GOOGLE

SearchCloudSecurity

SearchNetworking

SearchCIO

SearchConsumerization

SearchEnterpriseDesktop

SearchCloudComputing

ComputerWeekly

Close