[ Home | Contents | Search | Post ]
From: Paula
Date: 21/08/03
Time: 15:43:31
Remote Name: 62.255.0.5
W32.SOBIG.F@MM
A new variation on the old SOBIG virus which has been mentioned today in some newspapers. Seems to be going round like wildfire and when the high risk began yesterday, I got almost 200 emails containing the above virus and again this afternoon another 190 and still coming in every few minutes.
The virus can purport to be from any address on its list (even addresses from computers that are NOT infected) and its an attachment. Its hit some of the UK newspapers as having caused congestion on the internet here, so maybe elsewhere too?
Anyone who uses mailwasher, DON'T USE "BOUNCE BACK" for spam mail (uncheck it), just use DELETE instead if you are getting a lot of "possible Virus" mail (which contains the above virus in my case LOL). If you "bounce" the emails back the virus will go round and round ad infinitum.
The message headings include amongst others (I guess these are most popular cos they're the headings I've been getting):
That movie. Wicked Screensaver. Thank you. Your details. Your application.
Here's a description of the virus:
http://us.mcafee.com/virusInfo/default.asp?id=helpCenter&hcName=sobig
And here's a couple of free online antivirus scan sites:
http://www.pandasoftware.com/activescan/com/activescan_principal.htm
http://housecall.antivirus.com/housecall/start_corp.asp
If you're using a downloaded antivirus agent, check you've got the very latest data download before scanning because this is a NEW variant on the old SOBIG versions.