Welcome, Guest. Please login or register.
August 21, 2008, 03:32:12 PM
Home Help Search Login Register
News: We just upgraded to SMF, hope you like it!!

+  Akoss Forum
|-+  General
| |-+  Computer Chat
| | |-+  VIRUS WARNING - your_details.zip
« previous next »
Pages: [1] Print
Author Topic: VIRUS WARNING - your_details.zip  (Read 728 times)
akoss
Administrator
Full Member
*****
Offline Offline

Posts: 218


akossweb
View Profile WWW
VIRUS WARNING - your_details.zip
« on: June 27, 2003, 09:25:40 AM »

Today we have received a large number of emails that contain the W32.Sobig.E@mm virus. Our virus software performed perfectly finding the virus, but we are sure others will also receive it!

The content of the message says "Please see the attached zip file for details." and it has the virus attached as a zip named your_details.zip

DO NOT open the zip file.  Just delete the message.                    
Logged

akoss

=^..^=
akoss
Administrator
Full Member
*****
Offline Offline

Posts: 218


akossweb
View Profile WWW
VIRUS WARNING - your_details.zip
« Reply #1 on: June 27, 2003, 09:31:02 AM »

Here is what Symantec have to say about this virus:

Quote
Due to an increased rate of submissions, Symantec Security Response has upgraded this threat from a Category 2 to a Category 3.  

W32.Sobig.E@mm is a mass-mailing worm that sends itself to all the email addresses that it finds in the files with the following extensions:  

.wab  
.dbx  
.htm  
.html  
.eml  
.txt

The email falsely purports that Yahoo sent it (support@yahoo.com).

Email Routine Details
The email message has the following characteristics:

From: support@yahoo.com (NOTE: W32.Sobig.E@mm spoofs this field. It could be any address.)

Subject: The subject line will be one of the following:  
Re: Application  
Re: Movie  
Re: Movies  
Re: Submitted  
Re: ScRe:ensaver  
Re: Documents  
Re: Re: Application ref 003644  
Re: Re: Document  
Your application  
Application.pif  
Applications.pif  
movie.pif  
Screensaver.scr  
submited.pif  
new document.pif  
Re: document.pif  
004448554.pif  
Referer.pif


Attachment: The attachment name will be one of the following:  
Your_details.zip (contains Details.pif)  
Application.zip (contains Application.pif)  
Document.zip (contains Document.pif)  
Screensaver.zip (contains Sky.world.scr)  
Movie.zip (contains Movie.pif)

NOTE: The worm de-activates on July 14, 2003, and therefore, the last day on which the worm will spread is July 13, 2003.

Symantec Security Response has created a tool to remove W32.Sobig.E@mm.


Also Known As: Win32.Sobig.E [CA], W32/Sobig-E [Sophos], W32/Sobig.e@MM [McAfee], WORM_SOBIG.E [Trend]  
Type: Worm  
Infection Length: 82,195 bytes (zip file), 86,528 bytes (executable)  
Systems Affected: Windows 95, Windows 98, Windows NT, Windows 2000, Windows XP, Windows Me  
Systems Not Affected: Macintosh, OS/2, UNIX, Linux  
                   
Logged

akoss

=^..^=
akoss
Administrator
Full Member
*****
Offline Offline

Posts: 218


akossweb
View Profile WWW
VIRUS WARNING - your_details.zip
« Reply #2 on: August 22, 2003, 08:15:52 AM »

Today we read the following about the So Big virus on yahoo which is currently sweeping the globe and bringing down networks....

Quote


By Bernhard Warner and Elinor Mills Abreu  

LONDON/SAN FRANCISCO (Reuters) - A new computer virus, feared to be the most potent ever, expanded its reach around the globe on Thursday, sending e-mail networks crashing and frazzling technicians already overstretched by a plague of computer bugs.  

In the United States, Internet and e-mail service providers were blocking the worm in record numbers, while others were getting through to an untold number of unprotected computer users. Those people were complaining of hundreds, and even thousands, of e-mails with the worm in their inboxes.  

Internet service America Online said it blocked 23.2 million copies of the worm from reaching its customers and e-mail security provider Postini said it quarantined 3.5 million copies.  

MessageLabs, a British-based Internet security firm, said one in 17 e-mails sent around the world since Monday had been affected by SoBig.F.  

The SoBig.F virus, which first appeared on computing systems Monday, spreads when unsuspecting computer users open file attachments in e-mails that contain such familiar headings as \"Thank you,\" \"Re: Details\" or \"Re: approved.\"  

Once the file is opened, SoBig.F resends itself to scores of e-mail addresses from the infected computer and signs the e-mail using a random name and address from the infected computer's address book, which makes tracing it back to the source extremely difficult.  

SoBig.F also leaves a back-door program on the computer, which experts said may be used later to turn infected PCs into spam relay machines, as previous versions of Sob did.  

The worm was bogging down e-mail systems, bouncing automatic replies back to people listed as the sender but who likely were not.  

SOBIG, SO BAD  

MessageLabs' chief information analyst, Paul Wood, said it was feared that SoBig.F could increase global e-mail traffic by as much as 60 percent, slowing the Internet to a crawl.  

\"It's unprecedented in our history. We stopped over one million (infections) in the first day,\" he said. \"It's a pretty frightening statistic. And the next incarnation could be even worse.\"  

Technicians have been scrambling for the past week to fend off the most concentrated onslaught ever seen from worms. A \"worm\" is a type of computer virus that can send itself over a network without being attached to another, \"host,\" program.  

The outbreak began 10 days ago with the so-called \"Blaster,\" or \"LovSan,\" worm which, by some estimates, infected more than 500,000 computers running Microsoft Corp.'s Windows software, the world's dominant operating system.  

This week, the \"Welchia\" worm, also dubbed \"Nachi,\" surfaced. It was designed to patch the hole in Windows that Blaster, and Welchia, use to infect a computer.  

But Welchia clogs computer networks, slowing Internet connections and even knocking some systems offline. Its victims include the European engineering firm ABB (ABBZn.VX), Air Canada (Toronto:AC.TO - news) and the U.S. Navy and Marine Corps.  

On Thursday, experts reiterated their advice to computer users to shore up their machines with anti-virus software and to delete suspicious-looking e-mails, hoping that preventive medicine will stop this wave before the next round.  



We always recommend that our users NEVER open an email if the user is not recognized, and if the user IS a friend, be sure that the attachment is something that they actually sent.

Always run a virus checker, and keep it up to date! Wink                    
Logged

akoss

=^..^=
Pages: [1] Print 
« previous next »
Jump to:  


Login with username, password and session length

Powered by MySQL Powered by PHP Akoss Forum | Powered by SMF 1.0.9.
© 2001-2005, Lewis Media. All Rights Reserved.
Valid XHTML 1.0! Valid CSS!