Sobig virus back...AGAIN...new variant.

USA Today | 8/19/2003

[LinuxRocks]

Sobig.F email work is causing problems!

[LinuxRocks]

Dude, my name is not Ken. My name is Eddie. I'm close to crazy now after having spent almost my whole weekend dealing with this only to find Sobig.F eating my server alive right before going to bed. You can only imagine how crazy that made me, being sleep deprived and all. I can only imagine what our troops are having to put with in Iraq.

[Green Knight]

Wow. And here I thought my 30+ was a lot.

[Brad’s Gramma]

Thanks for the ping.

[technomage]

There, did I clarify my position on the matter?

Yes. I believe I am getting a sense of what you were trying to get across.

:0

[LinuxRocks]

And I'll tell you something else. This bullshit ought to server as a good f**king wake up call to everybody that Microsoft ain't got what it takes...if for usability we have to get these worms and security holes, I'll find something that is a little bit harder to use and a little more secure. There is no telling what this worm has costed businesses that I work with (and myself) in terms of productivity and downtime. It is an attrocity.

[boxerblues]

I really feel for you IT guys.

[LinuxRocks]

"Im not using Outlook and my inbox has been filled with these emails. My virus is up to date, firewall running and I cant stop them from coming in."

It is awful isn't it? And it is all because of the stupid M$ virus/worm email relay that is now on 99.9% of all desktops. The Emperor (Mr. Gates) has NO CLOTHES.

[LinuxRocks]

I am truly pissed off about this...it has gone on for way too long, and Microsoft has NOT fixed the problem. It is a constant distraction that they could fix, but they won't. And I'm sick of it, and I'm sick of them and their new licensing tricks. Sooner or later they will add their XP licensing tricks to computer hardware. I just might call it quits when that day comes.

[LinuxRocks]

"Outlook address book. There's your problem. That crappy program is just a virus petri dish."

One that 99.9% of all computer users use. And a problem that M$ won't fix. As the French queen once said, and as M$ says today "Let them eat cake."

[LinuxRocks]

AdAware is really awesome. A good program for those running Microsoft Windoze, which the spyware can easily infect.

[LinuxRocks]

How about this one...over a year ago, Microsoft, one of the richest companies on the planet, said - this was Gates talking now - Security is TOP PRIORITY. Fast forward to mid July 2003. This bug exploited by Blaster....was it found my Microsoft? NO!!! It was discovered by a programmer in Europe who kindly reported the bug to Microsoft. How about that? For all the programmers they have working there....what do you think of their "security initiative" ?????????????

[AnimalLover]

My virus is up to date, firewall running and I cant stop them from coming in.

I know what you mean. Had a virus a year ago that zapped my machine - had to get a new drive and start over.

Am now using the following programs - you can download a free 30 trial - I bought them all and "knock on wood" no virus.

You might check into the following on the internet:

MailWasher Pro - identifies spam, possible virus, filtered, etc., so they can be deleted before download. You can read these messages at the server before downloading.

FireTrust Benign. This reads over all E-Mail and will drop suspicious attachments. It also will rewrite some E-Mails so that all you see is the copy. No links.

Spy Sweeper - just bought this one. It's great! On my first sweep it picked up about 60 "cookies" that had been planted without my knowledge. You are able to check out each and every "cookie" - gives you an idea where it came from.

I'm rather new at this computer business so I suggest you check these programs out.

P.S. Just this evening I had an E-Mail listed as having been bounced - it had been rewritten with details I do not understand. The subject of the E-Mail was: re your details. This was referred to in the article in WND.

http://www.reuters.com/newsArticle.jhtml?type=topNews&storyID=3304287

Sorry to be so wordy!

[LinuxRocks]

Isn't it a shame, that you have to go thru all of this just to keep you computer working, and that you had an unrecoverable crash, all due to Billie Gate's SWILL called Windoze? It really sucks doesn't it? Well muliply your problems by 10, 20, 25, or 100 and you have the problems of a small business that has to support this crap on a daily basis. M$ slogan. Where do you want to go today?

[LinuxRocks]

The "your details" subject is a Sobig.F infected message. Check it out:

http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.html">http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.html

An exerpt: (infected email subjects)

Subject:
Re: Details
Re: Approved
Re: Re: My details
Re: Thank you!
Re: That movie
Re: Wicked screensaver
Re: Your application
Thank you!
Your details

[boxerblues]

I have all that and still they come.

For all you IT guys I promise not to bother you in the morning unless its to bring coffee & donuts

[rockfish59]

I'm close to Redmond. You want me to go kick Gates in the shin? =^)

[AnimalLover]

Re your details - that's what hit me. I'm not sure which program caught it - MailWasher Pro or FireTrust Benign - but thank the Lord it didn't get through - just bounced.

Following is the E-Mail I received:

----------------------------------------------------------

A Disallowed attachment type was found in an Email message you sent.

This Email scanner intercepted it and stopped the entire message reaching its destination.

The Disallowed attachment type was reported to be:

Forbidden file type - Possible MS-Dos program shortcut attack

Please contact your I.T support personnel with any queries regarding this policy.

Your message was sent with the following envelope:

MAIL FROM: My E-Mail Address

RCPT TO: support@ccbill.com

... and with the following headers:

--- MAILFROM: My E-Mail Address

Received: from unknown (HELO SUGATSUN-T0TBIC) (64.105.28.232) by corpmail.cwie.net with SMTP; 19 Aug 2003 14:51:25 -0000

From: To:

Subject: Re: Re: My details Date: Tue, 19 Aug 2003 7:51:24 --0700 X-MailScanner: Found to be clean Importance: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MSMail-Priority: Normal X-Priority: 3 (Normal) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="_NextPart_000_0A1F5821"

--- ----------------------------------------------------

This message has been processed by Firetrust Benign.

[JustPiper]

Thanx this is grand, the links. I had the virus about a month ago, kept spontaenously rebooting my pc. I had Norton Virus put on and Windows XP and a good firewall. Will this protect me?

[JustPiper]

What other Operating systems are good?

[JustPiper]

Holy Crap!