08-20-2003, 12:10 AM | #1 (permalink) |
Psycho
Location: BFE, Kentucky
|
Sobig.F worm
So anyone else's inbox being overrun by mails that have the subject of the folowing:
Re: Details Re: Approved Re: Re: My details Re: Thank you! Re: That movie Re: Wicked screensaver Re: Your application Thank you! Your details Looks like a new work out as of tuesday the 19th that is basicly spaming its way out....... This one is pissing me off, b/c i get on average one email a minute from this, the corp. a/v stops the viris but i get notifications of it...... I guess time to go hit the rules for hte spam filter and see if I cam block this crap........ If you want more details on it here is a link to Symantecs site..... http://securityresponse.symantec.com...obig.f@mm.html |
08-20-2003, 11:30 AM | #4 (permalink) |
Dopefish
Location: the 'Ville
|
I dont know if I have it or not, cause I'm not getting any of those emails, but my inbox is filling up with return to sender emails of Sobig.F coming from my hotmail account. I guess someone that has me in their address book has it, cause I ran 3 different AV's and symantec's sobig.F fix.
__________________
If you won't dress like the Victoria Secret girls, don't expect us to act like soap opera guys. |
08-20-2003, 11:41 AM | #5 (permalink) |
Crazy
Location: Upstate NY
|
what it will do is get all the email addresses it can find, ones on websites, in your address book what not. It will then spam those account and also use those accounts as spoofed email accounts so it looks like they came from you when they didn't. Look at the headers and look for the orginiating IP and contact that user to let them know, if you know that person.
__________________
I am jack's broken heart |
08-20-2003, 11:41 AM | #6 (permalink) |
Pro Libertate
Location: City Gecko
|
This one is annoying but a breeze if your AV is utd.
However the amount of helldesk calls I've seen today is laffable, "I didn't send these mails, I want you to track where they came from, and I will inform HR" is a notable quote from today. Needless to say (but I will) we politely ignored them, and eventually got the helldesk to not process those calls. PS: I think it spoofs email addresses, but no expert, cause loads of my clients are getting the same symptoms(SP) as wraith
__________________
[color=bright blue]W[/color]e Stick To Glass "If three of us travel together, I shall find two teachers." Confucious |
08-20-2003, 08:17 PM | #7 (permalink) |
Crazy
Location: Salt Lake City
|
SoDamnAnnoying!
I got some 250 copies of the virus yesterday alone in my tech support inbox. Somebody must have our tech support email on their address list, and that somebody must not have a clue what virus protection is.
__________________
---<>---^^---<>---^^---<>--- ---^^---<>---^^---<>---^^--- ---<>---^^---<>---^^---><--- |
08-20-2003, 10:00 PM | #8 (permalink) |
Riiiiight........
|
help!!
my mailbox has been FLOODED with this today. came on to see if anyone has a solution to this.... and for some reason, it all seems to be coming from one IP address. Received: from ACNT-SPARE (168-215-59-34.gen.twtelecom.net [168.215.59.34]) how do i reach this guy and tell him to turn off his comp??!! |
08-21-2003, 06:22 PM | #13 (permalink) | |
I demand a better future
Location: Great White North
|
Its a virus fest the last coupla days. I just got the new AVG 7... its kicking virus butt for me.
__________________
Quote:
|
|
Tags |
sobigf, worm |
|
|