BugBear

Also capable of terminating anti-virus and firewall programs is BugBear, a blended threat that propagates via email messages and shared network resources. But BugBear doesn’t stop with spreading its infection and battling security programs.

To facilitate theft of confidential information, BugBear installs a keylogging program on infected computers that records keystrokes to memory and emails the information (each time the user connects to the Internet) to one of several email addresses found in BugBear’s code. It also keeps one of the computer’s ports open; creating the potential for remote users to issue commands that let them alter files, retrieve passwords and other information, and more.