Virus Alert!

Just in case, we've been tracking a new virus that's been hitting our email
addresses, so be on the lookout and don't open any that words

'Details'
Please see the attached file for details.

 

Man, it's been spreading like wild fire!

It regenerates itself and then cycles as forwards, etc.

We tracked it to a file in WINNT directory that our updated Norton
Anti-virus could not quarantine or stop.

 

I got a few yesterday that were caught by our anti virus system. One was titled "Thank you!". The virus found was the W32/Sobig.f@MM virus !!!

Bill

 

Here is a bit of info on this thing........

BTW: got several more this morning


A new variant of W32/Sobig, W32/Sobig.f@MM is a High Risk
mass-mailing worm. It arrives as an email attachment with
a .pif or .scr extension. When run, it infects the host
computer, then emails itself (using its own SMTP engine)
to harvested email addresses from the victim's machine.
In addition, when it propagates, the worm "spoofs" the
"from: field", using one of the harvested email addresses.

Note: The worm copies itself onto the infected machine as:

C:\WINNT\WINPPR32.EXE

Caution: An infected email can come from addresses you
recognize and may contain the following information:

Subject:
- Your details
- Thank you!
- Re: Thank you!
- Re: Details
- Re: Re: My details
- Re: Approved
- Re: Your application
- Re: Wicked screensaver
- Re: That movie

Attachment:
- your_document.pif
- document_all.pif
- thank_you.pif
- your_details.pif
- details.pif
- document_9446.pif
- application.pif
- wicked_scr.scr
- movie0045.pif

Body:
- See the attached file for details
- Please see the attached file for details

 

I've gotten several of these over the past few days, but never from an e-mail address that I recognize. They've all
been from the address .
The subject line always reads Thank You!
You guys seen anything like that, or have your email addresses always been recognizable?

 

I have received every one of those subjects, and none from
an address that I recognize.

 

Here's the story:

http://money.cnn.com/2003/08/20/technology/worms.reut/index.htm?cnn=yes



Bill

 

I've never gotten any of the like prior to today - today, I got 11, all from
unrecognized addresses, all with related subjects, all with attachments (and
the night is young).