Thread: Virus Alert!
View Single Post
 
Old 08-20-2003, 03:32 PM
Mr Bluesman's Avatar
Mr Bluesman Mr Bluesman is offline
Senior Member
Destination any Forum
 
Join Date: 29 Jul 2002
Location: Derby, England
Gender: male
Posts: 4,315
Send a message via MSN to Mr Bluesman
Default Virus Alert!

Just incase you haven't heard about the latest virus that's going around. I thought I'd warn everyone just incase.

I got this e-mail from McAfee Security;

Dear Will,

A new variant of W32/Sobig, W32/Sobig.f@MM is a High Risk mass-mailing worm. It arrives as an email attachment with a .pif or .scr extension. When run, it infects the host computer, then emails itself (using its own SMTP engine) to harvested email addresses from the victim's machine. In addition, when it propagates, the worm "spoofs" the "from: field", using one of the harvested email addresses.

Note: The worm copies itself onto the infected machine as: C:\WINNT\WINPPR32.EXE

Caution: An infected email can come from addresses you recognize and may contain the following information:

WHAT TO LOOK FOR:

Subject: [content varies]
- Your details
- Thank you!
- Re: Thank you!
- Re: Details
- Re: Re: My details
- Re: Approved
- Re: Your application
- Re: Wicked screensaver
- Re: That movie

Body: [content varies]
- See the attached file for details
- Please see the attached file for details

Attachment: [content varies]
- your_document.pif
- document_all.pif
- thank_you.pif
- your_details.pif
- details.pif
- document_9446.pif
- application.pif
- wicked_scr.scr
- movie0045.pif



Learn More about W32/Sobig.f@MM http://us.mcafee.com/virusInfo/defau...irus_k=100561]
Scan for W32/Sobig.f@MM [http://us.mcafee.com/root/mfs/default.asp]
__________________
Reply With Quote