Here is the virus description from TrendMicro Labs : We decide to declare a YELLOW ALERT on the malware WORM_SOBIG.F, due to several infection over the world. For reminder here is the short Virus Description: This worm propagates by mass-mailing copies of itself using its own Simple Mail Transfer Protocol (SMTP) engine. It collects email addresses +from files with the following extensions: DBX HLP MHT WAB HTML The email message it sends out contains the following details: Subject: <any of the following:> Re: Thank you! Thank you! Re: Details Re: Re: My details Re: Approved Re: Your application Re: Wicked screensaver Re: That movie Message body: <any of the following:> See the attached file for details. Please see the attached file for details. Attachment: <any of the following:> your_document.pif document_all.pif thank_you.pif your_details.pif details.pif document_9446.pif application.pif wicked_scr.scr movie0045.pif Re: Thank you! It runs on Windows 95, 98, ME, NT,2000, and XP systems. http://www.trendmicro-europe.com
To want you have to do, TrendMicro explains everything here : http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SOBIG.F GOOD LUCK !! [---- On Tue, 19 Aug, 2003 at 11:43, Kliment Andreev wrote: ----] Kliment> Kliment> Kliment> >> Has anyone besides me been receiving a flood of infected emails? Kliment> Kliment> Kliment> I am flooded too. From 8:00AM (EST) till now (11:40AM) I received almost 120 Kliment> of these emails. I am using Norton Antivirus 2003. The attachments were Kliment> purged automatically. According to Kliment> http://www.symantec.com/avcenter/venc/data/[EMAIL PROTECTED] Kliment> this worm will stop 10-Sep. :) Kliment> Kliment> _______________________________________________ Kliment> [EMAIL PROTECTED] mailing list Kliment> http://lists.freebsd.org/mailman/listinfo/freebsd-questions Kliment> To unsubscribe, send any mail to "[EMAIL PROTECTED]" [---- End of original mail from Kliment Andreev ----] -- "No guts No glory" =] PASSELAC Armand [= ( @ @ ) Ingenieur Systemes-Reseaux & Securite ORBYTES INGENIERIE _______________________________________________ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
