anyone heard of this worm?

[jeffyfan]

I got an e mail saying that this worm was found in an e mail from my computer named worm.sobig.f I did a search on my advanced files and it did not show up. The email also said to click here to get rid of it so I was thinking it might be a scam but just thought I'd ask. I have my firewall and windows update done also the e mail washer so I would think I would be safe. What do you think??
Jonda

[jeffyfan]

Thanks that's kinda what I thought too
Jonda

[Pam712]

I havent heard of an F variant but info on Sobig E can be found here
http://antivirus.about.com/library/weekly/aa062503a.htm

[joshman1204]

There is a new sobig.f out! my mail servers were getting hammered with it today. The actuall virus is a .pif attachment inside a zip file so as long as you dont run the attachment you are ok. Also there is a scam going around claiming to have a fix for a worm.sobig.f but this is nothing but a scam because sobig is not a worm it is a mass mailing virii. A firewall and windows updates will not stop this virus just be sure to update your virus defs and dont open any e-mail that seems in the least bit suspicious! Also just so you know i have seen this virus attach itself to an NDR message form the "systems administrator" but this is just the virus trying to trick you

[jeffyfan]

Thanks for the info I just keep deleateing!!! So far everytime I check mail I have a ton of them. Yesterday someone was sending screensavers and it said something in the info pam gave me about they are attached to them also. Whant a pain in the ... well you know
Jonda

[joshman1204]

yea anything that says awesome or amazing screensaver is sobig.f

Tell me about being a pain in the @ss! i spent all day today trying to keep my mail servers from getting overloaded with these stupid messages! At one point today i was getting about 60 a minute and god only knows what i am going to find tommorow morning when i get to work. Oh well i guess thats job security, at least until my webmaster carrer takes off . And with 7 hits to my site yesterday i guess i may be needing that job security for a while

[jeffyfan]

Is there any way to block the e mails or will they just die off?

[joshman1204]

You can block them by subject but there are like 10 subjects so i dont know if you want to take the time to do that.

Re: Thank you!
Thank you!
Your details
Re: Details
Re: Re: My details
Re: Approved
Re: Your application
Re: Wicked screensaver
Re: That movie

these are the most common subjects that you can block.

This virus will stop spreading in 2 weeks so it is up to you

[jeffyfan]

Thanks guess I'll just deal with it. Two weeks isn't that long.
Jonda

[Ace Fun]

If you want to check to see if you are infected, look for a file named

WINPPR32.EXE

in your system directories.

[jeffyfan]

Just wanted you 2 know I went to that site Pam has in eariler post and did the stinger down load ( for FREE) and WOW it is great!!!! It found the darn worm on my computer and something else It deleated them and now I am clean. Thank you Pam soooooooooooooooooooooooooooooooo much
Jonda

[Pam712]

Glad it helped Jonda