View Full Version : W32.Bugbear@mm
helskel1987
10-26-2002, 05:01 PM
After running this worm removal tool which deleted 5 viral files and fixed 1 regisry entry. It stated that this Bugbear thing had been successfully removed. OK, everything works perfect except my outlook ex.6 (WXP) will not send mail. It doesn't accept my email address. Even if I delete the acct. and create a new one or just add a new one, nothing works. Already installed email security tool for OE6. Everything works fine on Hotmail and Log on.
Here is the exact error:
The message could not be sent because the server rejected the sender's e-mail address. The sender's e-mail address was 'xxxxxxxxxxxxxx@msn.com'. Subject '', Account: 'MSN Mail', Server: 'smtp.email.msn.com', Protocol: SMTP, Server Response: '530 5.7.3 Due to a recent security enhancement, changes to your email client configuration are required. Please go to http://supportservices.msn.com/us/smtptool/default.asp for complete information about the steps to make these quick changes. You will be unable to send email from your MSN account until those changes are made.', Port: 25, Secure(SSL): No, Server Error: 530, Error Number: 0x800CCC78
MSN never answered 3 emails to support. This seems to be a problem w/ a few other people too.
Can anyone help me? PLEASE!
Andy-S
10-27-2002, 10:34 AM
The error message provided the solution for the problem. Did you go to the hyperlink and carry out what was specified?
These are the details for Outlook in XP.
To manually change e-mail security settings in Outlook XP
Start Outlook.
Click the Tools menu, then click E-mail Accounts.
Select View or change existing e-mail accounts.
Click Next.
Choose your MSN Mail account, and click Change.
Click More Settings….
Under the Outgoing Server tab, check My outgoing server (SMTP) requires authentication.
Click the Use same settings as my Incoming mail server option.
Click OK.
Click Next.
Click Finish.
Cheers
Andy
Helskel1987,
I think you are referring to Outlook Express 6, not Outlook. Is that correct? These changes are also available at the link MS supplied.
Here are the settings you need, regardless of OS.
To manually change e-mail security settings in Outlook Express 5.0 and later
Start Outlook Express.
Click Tools, then click Accounts.
From the All tab, choose MSN Mail, and then click Properties.
Click the Servers tab.
Under Outgoing Mail Server, select the My server requires authentication check box.
Click Settings.
Click the Log on Using option.
Type your MSN user name in the Account Name box. Do not include your domain (the part of your e-mail address that begins with the @ symbol).
Type your password in the Password box. Optionally, you can select the Remember Password check box to avoid entering your password each time you sign in.
Select the Log on using Secure Password Authentication check box.
Click OK.
Nana /images/forums/icons/smile.gif
helskel1987
10-28-2002, 10:05 AM
Thanks for the response. I had already taken care of the security setings. I've checked & rechecked them. I still get the same error message. After reading about the Bugbear virus, I feel like that had something to do with it. See if this makes sense to anybody.
Passage from Symantec Security page.
It retrieves the current user's email address and SMTP server from the registry key
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Account Manager\Accounts
It then uses its own SMTP engine to send itself to all email addresses that it finds. The worm also can construct addresses for the "From:" field using information that it harvests from the infected computer. For example, the worm may find the addresses a@a.com, b@b.com and c@c.com. The worm could create an email message addressed to a@a.com and spoof the "From:" address, so that it appears to come from c@b.com. The spoofed address can also be a valid email address that the worm finds on the system.
In addition to the following list of subjects, the worm can create a new message as a reply to or forward of an existing message on the infected system.
When I ran the removal tool, I got this next response & thought everything was fixed. But still can't sign on to Outlook Express 6.
Deleted the value "btt" from the registry key
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\RunOnce".
The tool has deleted the viral file "C:\Documents and Settings\Owner\Application Data\MSN6\UserData\{86935B94-CD1A-01C1-0300-0000C1861865}\Hotmail\Temporary Mail Files (0049EEB2)\PLANE.doc(1).scr".
The tool has deleted the viral file "C:\Documents and Settings\Owner\Application Data\MSN6\UserData\{86935B94-CD1A-01C1-0300-0000C1861865}\Hotmail\Temporary Mail Files (0049EEB2)\PLANE.doc.scr".
The tool has deleted the viral file "C:\Documents and Settings\Owner\Start Menu\Programs\Startup\wcc.exe".
The tool has deleted the viral file "C:\WINDOWS\SYSTEM32\DFFT.EXE".
The tool has deleted the viral file "C:\WINDOWS\SYSTEM32\rllvgak.dll".
W32.Bugbear@mm has been successfully removed
from your computer!
Here is the report:
The total number of the scanned files: 65211
The number of deleted files: 5
The number of repaired files: 0
The number of viral processes terminated: 0
The number of registry entries fixed: 1
HELP!!!
helskel1987,
Sorry, I'm not able to help you with this.
Check back here as the others are far more experienced than I and may be able to further assist you.
Nana /images/forums/icons/smile.gif
Powered by vBulletin™ Version 4.1.0 Copyright © 2012 vBulletin Solutions, Inc. All rights reserved.