[at-l] Sobig worm

[jsmith at wate.com (James N. Smith)]

The Sobig worm, as well as many other varieties of worms and viruses, steal
addresses from other sources and spoof them. This means the sender shown in
the "From" field is most likely not the real sender.

Also, the Sobig worm is not only attached to .pif files. In some messages,
it is attached to a file called wicked_scr.scr.

It doesn't hurt to check your computer and doing so is easy. Go to
http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.html
and follow directions for downloading and running the removal tool. Or, as
Ryan says, update your anti-virus software and run a system scan.

-jns


-----Original Message-----
From: at-l-bounces@mailman.backcountry.net
[mailto:at-l-bounces@mailman.backcountry.net]On Behalf Of Ryan K. Brooks
Sent: Wednesday, August 20, 2003 1:18 PM
To: at-l@backcountry.net
Subject: [at-l] Sobig worm


There's at least three people on the list who have this new worm- please
scan your machines!

And don't open any ".pif" files, even if the (forged) sender is someone
you know.

Thanks,

Ryan


_______________________________________________
at-l mailing list
at-l@mailman.backcountry.net
http://mailman.hack.net/mailman/listinfo/at-l