August 19, 2003

As the Internet community continues the clean-up from MSBlast, another Internet worm is affecting Microsoft Windows users. The worm is a new variant of the Sobig virus. Like many other viruses, Sobig.F spreads through email attachments. Users who open the attachment, unintentionally install the worm on their computer. Once infected, the worm emails itself to addresses found in address books, cached webpages, and other documents. Sobig also opens ports for sending and listening on the infected machine.

The Sobig.F worm can be identified with an email subject line of

• Re: Details
• Re: Approved
• Re: Re: My details
• Re: Thank you!
• Re: That movie
• Re: Wicked screensaver
• Re: Your application
• Thank you!
• Your details

Or an attachment of the following names

• your_document.pif
• document_all.pif
• thank_you.pif
• your_details.pif
• details.pif
• document_9446.pif
• application.pif
• wicked_scr.scr
• movie0045.pif

In a continuing effort to help protect users from viruses, Green Apple has blocked emails having Sobig's signature. In addition, the ports on which Sobig sends and listens have been blocked.

If you believe your computer is infected and could use help, please do not hesitate to give us a call.  As always, Green Apple users are welcome to bring in their machines for virus scans and virus removals.

Related Links

For more info on Sobig, please see Green Apple PC Sentry
    http://www.greenapple.com/support/security/pc-sentry/sobig.htm

Symantec's Sobig.F removal tool.

For more information on viruses in general and prevention techniques, please see
    http://www.greenapple.com/support/library/virus-faq.htm
 

Home / Access / Development / Support / Hosting / Local Links / Computers
 Contact Us / Green Apple News / Jobs / Site Map / Link To Us / Policy

Lancaster-Fairfield County Chamber of Commerce, 2000 Small Business of the Year
www.greenapple.com · tel. (740) 653-9890 · toll free. (866) 653-9890
Copyright © 1995 - 2007, Green Apple, Inc.