Bugbear exploits a security hole that MS have patched - go to Windows Update and you won't run it (or variants) simply by opening the email to which it is attached, though you still mustn't open the attachment.