Somebody here may have the Sobig virus...

From: Emlyn O'regan (oregan.emlyn@healthsolve.com.au)
Date: Thu Sep 04 2003 - 23:27:39 MDT

  • Next message: Brett Paatsch: "Re: Who'd submit to the benevolent dictatorship of GAI anyway?"

    Hi all,

    I'm getting a number of bounced messages from seemingly random places. The
    From addresses are my email address, and the subjects are those that fit the
    profile of the Sobig.F worm:

    http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.html

    I don't have a virus/worm (I've checked), but someone does who also has me
    in their address book. It could be someone on the list.

    That person probably has these addresses in their address books or in other
    files on their machine:

    mmckaskle@destinationhotels.com
    wwilderman@destinationhotels.com
    Carmencita Totua (??)
    consortium@cbsd.com

    These might also be addresses being spammed via the infected machine, which
    right now is probably being used as an open relay by evil spammers (see the
    URL above to check it out; Sobig.F is designed to put secret open relay SMTP
    servers all over the net for use by the unscrupulous).

    So if your virus checks are not up to date, run a virus check asap (try
    http://www.symantec.com/ and/or http://us.mcafee.com/default.asp for free
    virus scans)

    Thanks,
    Emlyn

    This archive was generated by hypermail 2.1.5 : Thu Sep 04 2003 - 23:38:05 MDT