New worm gives us yet another reason not to open attached e-mail files

Enrique · Post #1 (**permalink**) 07-01-2003, 03:12 PM

Quote:

Sobig.e arrives via e-mail or shared network file. The e-mail message appears to be from someone you might know, but this address is spoofed. The e-mail's subject line may include one of the following:

Application Ref: 456003
Your application
Re: Re: Document
Re: Re: Application ref. 003644
Re: Documents
Re: Screensaver
Re: Submited (Ref: 003746)
Re: Movies
Re: Movie
Re: Application

The attached file is your_details.zip. Since ZIP files are ignored by most extension-blocking rules within e-mail clients, you should not attempt to open this file. Some copies of Sobig.e sent from infected machines may produce attached files with only a .zi extension.

http://reviews.cnet.com/4520-6600-1021026.html

I received 3 of those this morning

For anyone infected:
W32.Sobig.E@mm Removal Tool - Symantec Security has developed a removal tool to clean the W32.Sobig.E@mm infections:
http://securityresponse.symantec.com...oval.tool.html

Artashes · Post #2 (**permalink**) 07-01-2003, 08:08 PM

I receive sometimes tens of this every day from many sources, but 1) I never open e-mails I do not expect to receive 2) my anti-virus filter blocks most of it.

In all, I have 2 anti-virus and anti-spam systems that guard me. Working very well.