New worm posses 'Big Threat' to email users!

Question

Symantec security response discovered that the W32.Sobig.B@mm worm is running wild. This level 3 worm is currently ranked the second highest threat and was found on 5-18-03!

Answer

This question was answered on May 21, 2003. Much of the information contained herein may have changed since posting.

W32.Sobig.B@mm is a mass-mailing worm considered to be a big threat. The worm uses a built in e-mailer engine to distribute itself to addresses on the infected PC. The email comes in disguise as something from Microsoft and has an attachment.

The email message has the following characteristics:

Subject: It is one of the following:

-Your details

-Approved (Ref: 38446-263

-Re: Approved (Ref: 3394-65467)

-Your password

-Re: My details

-Screensaver

-Cool screensaver

-Re: Movie

-Re: My Application

Message: All information is in the attached file.

Attachment:It is one of the following:

-your_details.pif

-ref-394755.pif

-approved.pif

-password.pif

-doc_details.pif

-screen_temp.pif

-screen_doc.pif

-movie28.pif

-application.pif

Most Windows operating systems are affected.

Symantec advises all possible victims to download latest virus definitions immediately and deploy.

Get complete instruction on protection and removal from Symantec at:

<a href="http://sarc.com/avcenter/venc/data/w32.sobig.b@mm.html"> http://sarc.com/avcenter/venc/data/w32.sobig.b@mm.html </a>

Author

Posted by Michal of Data Doctors on May 21, 2003