New mass email worm on the loose! W32.Sobig.F@mm

[IcemanJer]

Did a search and didn't find anything.... so here it is.

Link to Symantic Security Response. Symantec just upgrade this from a Category 2 to a Category 3 threat.

McAfee is listing it as a High Risk Worm

Mods, sticky please, perhaps?

 

[filmmaker]

*sigh*

 

[conjur]

Anybody who opens a .pif or .scr file deserves to be nailed

Is the default security setting in Outlook Express now to be the More Restricted zone?

 

[chin311]

yup, just got FOUR emails with this attachment at my work...

and we use lotus notes.

i accidently opened one, not thinking (in a rush)...oh wells, havent noticed anything so far :beer:

 

[Analog]

Nooooooooooooooo.

 

[IcemanJer]

Originally posted by: conjur
Is the default security setting in Outlook Express now to be the More Restricted zone?

Outlook Express 6 has the restricted zone set by default. Also you can choose to not save or open attachments that could be a virus, I guess that includes .pif, .scr, .exe, and .htm(l) files. However, it still will open HTML-encoded messages automatically, so you'll have to manually choose to view all emails as plain-text from the READ tab.

 

[imported_Papi]

Good thing I never read my home e-mails

 

[IcemanJer]

Originally posted by: chin311
i accidently opened one, not thinking (in a rush)...oh wells, havent noticed anything so far :beer:

the clean up isnt' too bad.. you delete that one file and remove the reference to from the Registry and reboot, and that's pretty much it. The Symantic link goes into more details about it.

 

[chin311]

Originally posted by: IcemanJer

Originally posted by: chin311
i accidently opened one, not thinking (in a rush)...oh wells, havent noticed anything so far :beer:

the clean up isnt' too bad.. you delete that one file and remove the reference to from the Registry and reboot, and that's pretty much it. The Symantic link goes into more details about it.

yeah, i'd do that if i cared enough...but since its teh work comp., on the work network...ill just wait till something is wrong and call IT...ahh the joy :beer:

 

[Silverbullet28]

I just got back from a user's office who had this on their machine. I doubt it will be the last either.

 

[IcemanJer]

Originally posted by: chin311
yeah, i'd do that if i cared enough...but since its teh work comp., on the work network...ill just wait till something is wrong and call IT...ahh the joy :beer:

...:|

 

[chin311]

Originally posted by: IcemanJer

Originally posted by: chin311
yeah, i'd do that if i cared enough...but since its teh work comp., on the work network...ill just wait till something is wrong and call IT...ahh the joy :beer:

...:|

lol, thats what they are there for...i did my time...

 

[LordJezo]

w00t.

It's going around Rutgers now. Just checked my school account and had 2 messages in there from the virus.

 

[Silverbullet28]

Originally posted by: chin311

Originally posted by: IcemanJer

Originally posted by: chin311
yeah, i'd do that if i cared enough...but since its teh work comp., on the work network...ill just wait till something is wrong and call IT...ahh the joy :beer:

...:|

lol, thats what they are there for...i did my time...

Ban!

 

[MercenaryForHire]

I've got all of this crap beat - I read my email with pine through a telnet window.

- M4H

 

[Scarpozzi]

These have been hitting our campus hard today. It's really funny cause I've gotten 3 text pages from this virus. We're isolating the ports and keeping it back at the switch.

 

[IcemanJer]

Originally posted by: MercenaryForHire
I've got all of this crap beat - I read my email with pine through a telnet window.

unless you still receive them, PITA, it's filling up my inbox like nothing... blah...

 

[oniq]

I've just gotten 8 emails within the past few hours with it. Wow. Beats horsesex spam though!

 

[vi edit]

You guys at work - why don't your admins have attachment blocking enforced at the gateway/mail server level? Really? Unless you are a programming firm doing screen savers, does anyone really have a use for passing around .pifs or .scr files? Those things really have no reason being passed around or through a company.

JMHO.

 

[Silverbullet28]

Originally posted by: vi_edit
You guys at work - why don't your admins have attachment blocking enforced at the gateway/mail server level? Really? Unless you are a programming firm doing screen savers, does anyone really have a use for passing around .pifs or .scr files? Those things really have no reason being passed around or through a company.

JMHO.

That would be because our Admin does not know what they are doing. :disgust:

 

[narzy]

BASTERD USERS FROM HELL!

 

[AlienCraft]

I used the Network Associates "stinger" scan/cleaner and it found a mumu.bat worm , even after doing the patch. I think it snuck in during the time I disabled Zone Alarm for Windows.com access.
I found if I turned off AIM, the number of "pings" diminished substantially.
NOw, I just have to fix OUTLOOK, because there seems to be a corrupted dll.file that won't let it start. OE 6 runs though....
<kicking self for not B/U EVERYTHING on hd before leaving town last week......

 

[WoofyJr]

ARughhhh more virus and worms coming this month... What's up with it? My friend got bugbear@b virus and I m trying to get rid of it.......


Im starting to hate internet now cuz of it....


Sigh........

 

[shopbruin]

i've only received about 80 of these messages today.

norton kicked each one out. or outlook won't let me download the message.

ARGH MAKE IT STOP!

 

[rh71]

Originally posted by: chin311

Originally posted by: IcemanJer

Originally posted by: chin311
i accidently opened one, not thinking (in a rush)...oh wells, havent noticed anything so far :beer:

the clean up isnt' too bad.. you delete that one file and remove the reference to from the Registry and reboot, and that's pretty much it. The Symantic link goes into more details about it.

yeah, i'd do that if i cared enough...but since its teh work comp., on the work network...ill just wait till something is wrong and call IT...ahh the joy :beer:

You're an IT person's dream user !