Hi, Karen.
As Susan mentioned, it appears you have the W32.Sobig.F2mm worm. W32.Sobig.F2mm
is a mass-mailing, network-aware worm that sends itself to all the email
addresses that it finds in the files with the following extensions:
.dbx
.eml
.hlp
.htm
.html
.mht
.wab
.txt
The e-mail message has the following characteristics:
From: Spoofed address (which means that the sender in the "From" field is most
likely not the real sender).
The worm may use the address admin@internet.com as the sender.
Subject:
Re: Details
Re: Approved
Re: Re: My details
Re: Thank you!
Re: That movie
Re: Wicked screensaver
Re: Your application
Thank You!
Your details
Body:
See the attached file for details
Please see the attached file for details.
Attachment:
your_document.pif
document_all.pif
thank_you.pif
your_details.pif
document_9446.pif
application.pif
wicket_scr.scr
movid0045.pif
Note: The worm deactivates on Sept. 10, 2003. The last day on which the worm
will spread is September 9, 2003.
> In a message dated 8/20/2003 8:40:43 AM Central Standard Time,
> steve@OldSub.com writes:
>
>
> > Subj:Re: [oletrucks] I didn't send that screensaver thing
> > Date:8/20/2003 8:40:43 AM Central Standard Time
> > From:<A HREF="mailto:steve@OldSub.com";>steve@OldSub.com</A>
> > To:<A
> HREF="mailto:Karen.Duff@ctbrad.ang.af.mil";>Karen.Duff@ctbrad.ang.af.mil</A>,
><A
> HREF="mailto:oletrucks@autox.team.net";>oletrucks@autox.team.net</A>
> > Sent from the Internet
> >
> >
> >
> > Most likely you got one of those virus that send messages to everyone you
> > know.
>
> I believe it's the W32/Sobig.f@MM virus that mails itself as the screensaver
> message. Karen, you might want to go ahead and get a virus sweep and
> protection on your PC.
> Susan
oletrucks is devoted to Chevy and GM trucks built between 1941 and 1959
|