Virus Alert!

[Rudy Tovar]

Just in case, we've been tracking a new virus that's been hitting our email addresses, so be on the lookout and don't open any that words

'Details'
Please see the attached file for details.

 

[Rudy Tovar]

Man, it's been spreading like wild fire!

It regenerates itself and then cycles as forwards, etc.

We tracked it to a file in WINNT directory that our updated Norton Anti-virus could not quarantine or stop.

 

[BillZ]

I got a few yesterday that were caught by our anti virus system. One was titled "Thank you!". The virus found was the W32/Sobig.f@MM virus !!!

Bill

 

[Jason Piercey]

Here is a bit of info on this thing........

BTW: got several more this morning

A new variant of W32/Sobig, W32/Sobig.f@MM is a High Risk mass-mailing worm. It arrives as an email attachment with a .pif or .scr extension. When run, it infects the host computer, then emails itself (using its own SMTP engine) to harvested email addresses from the victim's machine. In addition, when it propagates, the worm "spoofs" the "from: field", using one of the harvested email addresses.

Note: The worm copies itself onto the infected machine as:

C:\WINNT\WINPPR32.EXE

Caution: An infected email can come from addresses you
recognize and may contain the following information:

Subject:
- Your details
- Thank you!
- Re: Thank you!
- Re: Details
- Re: Re: My details
- Re: Approved
- Re: Your application
- Re: Wicked screensaver
- Re: That movie

Attachment:
- your_document.pif
- document_all.pif
- thank_you.pif
- your_details.pif
- details.pif
- document_9446.pif
- application.pif
- wicked_scr.scr
- movie0045.pif

Body:
- See the attached file for details
- Please see the attached file for details

 

[rewilson]

I've gotten several of these over the past few days, but never from an e-mail address that I recognize. They've all been from the address . The subject line always reads Thank You! You guys seen anything like that, or have your email addresses always been recognizable?

 

[Jason Piercey]

I have received every one of those subjects, and none from an address that I recognize.

 

[BillZ]

Here's the story:

http://money.cnn.com/2003/08/20/technology/worms.reut/index.htm?cnn=yes

Bill

 

[randy benson]

I've never gotten any of the like prior to today - today, I got 11, all from unrecognized addresses, all with related subjects, all with attachments (and the night is young).