Skip to content

Important Message

You are browsing the archived Lancers Reactor forums. You cannot register or login.
The content may be outdated and links may not be functional.


To get the latest in Freelancer news, mods, modding and downloads, go to
The-Starport

W32.SoBig.F@mm

This is where you can discuss your homework, family, just about anything, make strange sounds and otherwise discuss things which are really not related to the Lancer-series. Yes that means you can discuss other games.

Post a reply

Arcon

Post Sat Aug 23, 2003 2:31 am

W32.SoBig.F@mm

I just posted this on my forum and i thought i had better do the same here:
Ive just had a redflag go up from my mail server saying it couldnt send an email to some guy (i dont know who) with the attachment "your_details.pif" in it.
Anyone keeping up with internet security will know straight away what this is.

Word is to pretty much delete all mail that contains:

Subject:
Re: Details
Re: Approved
Re: Re: My details
Re: Thank you!
Re: That movie
Re: Wicked screensaver
Re: Your application
Thank you!
Your details

Body:
See the attached file for details
Please see the attached file for details.

Attachment:
your_document.pif
document_all.pif
thank_you.pif
your_details.pif
details.pif
document_9446.pif
application.pif
wicked_scr.scr
movie0045.pif

Now i did a full Virus scan, checked my registory and mail logs and i have NOT received this virus as of yet, however:

W32.Sobig.F@mm uses a technique known as "spoofing," by which the worm randomly selects an address it finds on an infected computer. The worm uses this address as the "From" address when it performs its mass-mailing routine. Numerous cases have been reported in which users of uninfected computers received complaints that they sent an infected message to another individual.

For example, Linda Anderson is using a computer infected with W32.Sobig.F@mm. Linda is neither using an antivirus program nor has the current virus definitions. When W32.Sobig.F@mm performs its email routine, it finds the email address of Harold Logan. The worm inserts Harold's email address into the "From" portion of an infected message, which it then sends to Janet Bishop. Then, Janet contacts Harold and complains that he sent her an infected message; however, when Harold scans his computer, Norton AntiVirus does not find anything, because his computer is not infected.

So someone who has me on their mailing list DOES have the virus. So this is really a heads up to those people who dont know about this virus yet or may have my details on their pc, Please check yourself out and do your bit to stop the flow of the virus.

Check out Symantec Labs for pretty much EVERYTHING you ever wanted to know about the virus and how to get rid of it if you do have it

-arcon
------

freighter fighter

Post Sat Aug 23, 2003 1:23 pm

im doing a system wide scan at home ( 4 computers ) 5 hours so far....

-------

Post Sun Aug 24, 2003 5:28 am

Haven't gotten this virus yet(thankfully). Unfortunately, I did get the MSBlaster Worm.

"Alright, you primitive screwheads, LISTEN UP! See this? This is my BOOMSTICK!!"

Leonhart

Post Sun Aug 24, 2003 5:54 am

@Arcon

Same thing is happening to me...I scanned my PC at least 5 times so far and its all clean...so, who ever has my email you better scan your PC! I am getting annoyed...getting whole bunch of emails telling that delivery failed to ???? (person I never hear of). So if you have my email check your damn PC...

Thank you

Leonhart
General of a clan
Leader of UltraLeon Works

Edited by - leonhart on 24-08-2003 07:18:27

Arcon

Post Sun Aug 24, 2003 1:46 pm

read the quote ^^ it explains why people without the virus are getting confused

-arcon
------

mustang

Post Mon Sep 08, 2003 12:51 pm

Im getting hit with 15-30 infected emails a day now.
The worst part is, you don't know who is sending it and I really want to flame the hell out of someone for having crud security.

Eraser

Post Mon Sep 08, 2003 1:03 pm

@Mustie

I have been hit a few times by this baby too, but my McAfee Active Shield detects them everytime, so no problems for me luckely. (I use McAfee Virusscan Online)

There are multiple IP trackers, but you have to pay for most of them (as always), but there´s also an IP tracker online which you can use for free: IP Tracker This tool is very handy, so just check it out.

Edited by - Eraser on 08-09-2003 14:04:01

mustang

Post Mon Sep 08, 2003 2:30 pm

Glad to know im not the only one. I think I may have tracked down whos machine has been sending them out, it looks like thie virus doesn't use spoofed addresses 100% of the time. You just have to be on the ball when a legit address comes through.

I've been catching them before they get to my inbox, but it's really annoying to be getting a virus warning every 5 minutes when a new email get's delivered.

kimk

Post Mon Sep 08, 2003 5:05 pm

the attachment download thing seems to filter it out tho. i've got numerous mails about screensavers but they all turn out to be some virus or another that's been caught by hotmail. but on all my experience with comps, nvr got a single virus infection

Tawakalna

Post Mon Sep 08, 2003 5:46 pm

noooooooooo kimk never ever say that! the virus curse WILL get you now! it knows who thinks they are secure then gets them!

jollysoul

Post Wed Sep 17, 2003 12:52 am

I didn't have a problem with it as Trend Micro's PcCillin caught it every time until my cable ISP started catching them at their servers.



Stay frosty out there!!! "Check"-Trent

Return to Off Topic




Hosted by The Starport • Theme by ST Software