Sobig.F worm
 

So anyone else's inbox being overrun by mails that have the subject of the folowing:

Re: Details
Re: Approved
Re: Re: My details
Re: Thank you!
Re: That movie
Re: Wicked screensaver
Re: Your application
Thank you!
Your details

Looks like a new work out as of tuesday the 19th that is basicly spaming its way out.......
This one is pissing me off, b/c i get on average one email a minute from this, the corp. a/v stops the viris but i get notifications of it...... I guess time to go hit the rules for hte spam filter and see if I cam block this crap........

If you want more details on it here is a link to Symantecs site.....

http://securityresponse.symantec.com...obig.f@mm.html

yeah. I've been getting tons of shit in my box from that too. Someone has way too much time on their hands.

Yup...I get close to 30 a day in my work inbox. Luck for me we have good anit viri software to kill it as it comes in.

I dont know if I have it or not, cause I'm not getting any of those emails, but my inbox is filling up with return to sender emails of Sobig.F coming from my hotmail account. I guess someone that has me in their address book has it, cause I ran 3 different AV's and symantec's sobig.F fix.

what it will do is get all the email addresses it can find, ones on websites, in your address book what not. It will then spam those account and also use those accounts as spoofed email accounts so it looks like they came from you when they didn't. Look at the headers and look for the orginiating IP and contact that user to let them know, if you know that person.

This one is annoying but a breeze if your AV is utd.

However the amount of helldesk calls I've seen today is laffable, "I didn't send these mails, I want you to track where they came from, and I will inform HR" is a notable quote from today.

Needless to say (but I will) we politely ignored them, and eventually got the helldesk to not process those calls.

PS: I think it spoofs email addresses, but no expert, cause loads of my clients are getting the same symptoms(SP) as wraith

SoDamnAnnoying!
I got some 250 copies of the virus yesterday alone in my tech support inbox. Somebody must have our tech support email on their address list, and that somebody must not have a clue what virus protection is.

help!!
my mailbox has been FLOODED with this today. came on to see if anyone has a solution to this....
and for some reason, it all seems to be coming from one IP address.

Received: from ACNT-SPARE (168-215-59-34.gen.twtelecom.net [168.215.59.34])

how do i reach this guy and tell him to turn off his comp??!!

Sobig has it's own SMTP engine so you can shut down the mailserver, you can only watch it email itself till you remove it.

Take the machine off the network now!

My ISP has filtered out all of this, and I haven't received anything at all. Mediacom rules!

same here. havent received any of those.

600 new viruses in the past 20 hours for me.
It seems to have slowed down actually.

But that is nothin compared to someone I know that is getting 1000 per hour. :eek:

Its a virus fest the last coupla days. I just got the new AVG 7... its kicking virus butt for me.