Urgent!: W32.Sobig.F@mm Virus

Tuesday, August 19, 2003 by grayhaze | Discussion: WinCustomize News

Many users of this site are currently reporting an outbreak of a new variation of the Sobig virus which is filling e-mail mailboxes everywhere. This virus spreads by sending a copy of itself to all e-mail addresses that it finds on an infected machine, disguising itself as an attachment from another address it finds.

There are reports of some individuals receiving over 500 of these virus e-mails in less than a day, and the problem continues to grow extremely quickly.

Please can all users of this site ensure that they are running an up-to-date virus checker on their machines, with current virus definition updates, to prevent further spread and disruption. There is also a stand-alone tool for removal of the virus if you do not have virus checking software on your machine (which everyone here should!)

For further information, check out the following links.

Symantec: http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

McAfee: http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=100561

McAfee AVERT Stinger (Stand-alone removal tool): http://vil.nai.com/vil/stinger/

BBC News: http://news.bbc.co.uk/1/hi/technology/3164861.stm

Sophos: http://www.sophos.com/virusinfo/articles/sobigf.html
Koasati
Reply #1 Tuesday, August 19, 2003 8:05 PM
I agree grayhaze........  there's no excuse for connecting to the internet without UP-TO-DATE anti-virus protection. If you don't mind getting hit with these bugs, and worms, and other nasties, then fine.... don't use any firewalls, and anti-virus apps. But, if you're not going to protect your machine, then please  do the rest of us a favor............ Empty your Address Book,.. delete every entry, so when you get hit, you won't spread it.   
rikkie
Reply #2 Tuesday, August 19, 2003 9:03 PM
It's absolutely crucial these days to have your automatic update option in the virusscanner turned ON as well .Norton today blocked some 15 ( yes , 15 !! ) e-mails with hidden attachments containing this new worm .
Grfx Guru
Reply #3 Tuesday, August 19, 2003 10:35 PM
15 is that all?
I'm up to 200 emails and counting, that god for upto date virus software........and there I was thinking I had become real popular and everyone wanted to talk to me lol

The most annoying part is that in all the emails being sent to peoples mail boxes, it is so easy to overlook one that you actually wanted to get.
joetheblow
Reply #4 Tuesday, August 19, 2003 10:45 PM
oh crud, not another one
mormegil
Reply #5 Wednesday, August 20, 2003 1:11 AM
I have been blocking all the infected files since this morning, when my mailbox overloaded at 600. However I have recived 300 more Mail failuer notices in just the last few hours. Now I am having to block those. Which sucks becuse I will not know if something I send failes for a normal reason. This worm sucks.  I guess this is what I get for posting my email adress on all my skins. and in my comments. But I refuse to change addresses. yet.......
craeonics
Reply #6 Wednesday, August 20, 2003 3:44 AM
Bah, I never use a virus scanner and haven't had a virus/worm in aeons. First and prime way to avert "infection" is to not blindly click on anything you find in your mailbox.
themorphium
Reply #7 Wednesday, August 20, 2003 3:47 AM
No one loves me, only 3 emails today with virii.
grayhaze
Reply #8 Wednesday, August 20, 2003 5:26 AM
The point is craeonics, you wouldn't know if you had been infected with this virus unless you had anti-virus software to alert you to the problem. The 'it'll never happen to me' attitude is the exact reason why we have such a problem, and it's people like yourself who are potentially putting others at risk.
Larry Kuperman
Reply #9 Wednesday, August 20, 2003 6:55 AM
Craeonics, MSBLAST spread through sweeps of unprotected ports, not through an attachment.

Not having an anti-virus program is akin to risking a fire in your home. It not only effects you, it effects your neighbors as well. And, in the case of the Internet, we are all your neighbors.
Hell Dragon
Reply #10 Wednesday, August 20, 2003 7:40 AM
I hear ya mormegil... this thing sucks.

Anyone that has a public email address on the net or includes their email in their skins gets blasted even more.

I'm currently receiving 1 virus email or failure notice every 25 seconds at the moment, and overnight it overloaded my 30MB POP3 account
Sven Lowry
Reply #11 Wednesday, August 20, 2003 8:50 AM
I'm sorry craeonics but thats the most stupid thing I've heard in a long time.
Do you get in a car and drive without a seatbelt, just because you haven't had your head smashed thru the windshield yet??
get to www.grisoft.com and download AVG - it's completely free.
craeonics
Reply #12 Wednesday, August 20, 2003 8:57 AM
=sigh=
=sigh=
=sigh=

Trust me, I know when I am hit by a virus. I am the guy who has his eye on running processes all the time.

=sigh=
REMenard
Reply #13 Wednesday, August 20, 2003 12:10 PM
Oh no Mr. Bill you did to us again, the all in one holely grail connecting mail, the OS, and Office.
Anti-virus software is one thing you can do to protect your self. The other which I do is I don't run with MS outlook.
I am using a different email client that has it's own browser engine so it cuts out the script issues.
Good Luck, I been there before, that's why I won't go back.
Aqua.
Reply #14 Wednesday, August 20, 2003 12:37 PM
Grrrr, I don't have the virus, but my email address is one of the ones being faked in the "From:" line. I'm getting hundreds of bounce backs

Fortunately, I haven't gotten a single email with the virus in it being sent to me. Doesn't matter since I pre-screen all of my email through the web interface before downloading with OE
Grfx Guru
Reply #15 Wednesday, August 20, 2003 5:02 PM
craeonics........

'I know when I am hit by a virus', surely the whole point is to avoid being hit in the first place? Bit like saying, I know the ship has sunk when my feet get wet

No offense intended, my mail box is overflowing with hits today and return notes from places where my email address has been faked as well but it does seem to be decreasing in quantity, just thought I'd see the lighter side of it for once.

Regards to all,
Drop125
Reply #16 Wednesday, August 20, 2003 5:31 PM
I would like to add that every user I know that has been infected..Like a Dumb (explitive), Has disabled AutoUpdate for windows..Seems everyone is so Scared of BIG Brother that they would rather infect themselves than by keeping auto update on...Using pirated copies of Security software and In general not sending the Error reports to microsoft..If you dont enable Live update or auto update, these things will take your system out....I would like to say Ive yet to get one hit from a virus and I update my stuff everyday...Why..Because I love all of you ppl and wouldnt want to get you sick to...

Please login to comment and/or vote for this skin.

Welcome Guest! Please take the time to register with us.
There are many great features available to you once you register, including:

  • Richer content, access to many features that are disabled for guests like commenting on the forums and downloading skins.
  • Access to a great community, with a massive database of many, many areas of interest.
  • Access to contests & subscription offers like exclusive emails.
  • It's simple, and FREE!



web-wc01