Topic: SoBig virus: download the Symantec fix tool for free

[Captain KoraH]

I have been getting a lot of emails from infected computers and the SFC community needs to be protected.

You can download the Symantec fixing tool (170kb or so in size) for free  here.

This tool will scan your computer for the SoBig virus and fix it, and it will also fix your registry and delete the virus files. I strongly suggest everyone download and run this tool, and make sure your email program is not set to automatically execute attachment files.

This virus is passed by email, with an attachment that ends in the .pif or .scr file extension. It has the following subject lines at random:

Re: Details
Re: Approved
Re: Re: My details
Re: Thank you!
Re: That movie
Re: Wicked screensaver
Re: Your application
Thank you!
Your details

It has the following body text at random:

See the attached file for details
Please see the attached file for details.

And the attachemnt has the following file names at random:

your_document.pif
document_all.pif
thank_you.pif
your_details.pif
details.pif
document_9446.pif
application.pif
wicked_scr.scr
movie0045.pif


W32.Sobig.F@mm uses a technique known as "email spoofing," by which the worm randomly selects an address it finds on an infected computer. The spoofed addresses and the Send To addresses are both taken from the files found on the computer. Also, the worm may use the settings of the infected computer's settings to check for an SMTP server to contact.

I strongly advise everyone to download and run this fix program.  

[Captain KoraH]

I have been getting a lot of emails from infected computers and the SFC community needs to be protected.

You can download the Symantec fixing tool (170kb or so in size) for free  here.

This tool will scan your computer for the SoBig virus and fix it, and it will also fix your registry and delete the virus files. I strongly suggest everyone download and run this tool, and make sure your email program is not set to automatically execute attachment files.

This virus is passed by email, with an attachment that ends in the .pif or .scr file extension. It has the following subject lines at random:

Re: Details
Re: Approved
Re: Re: My details
Re: Thank you!
Re: That movie
Re: Wicked screensaver
Re: Your application
Thank you!
Your details

It has the following body text at random:

See the attached file for details
Please see the attached file for details.

And the attachemnt has the following file names at random:

your_document.pif
document_all.pif
thank_you.pif
your_details.pif
details.pif
document_9446.pif
application.pif
wicked_scr.scr
movie0045.pif


W32.Sobig.F@mm uses a technique known as "email spoofing," by which the worm randomly selects an address it finds on an infected computer. The spoofed addresses and the Send To addresses are both taken from the files found on the computer. Also, the worm may use the settings of the infected computer's settings to check for an SMTP server to contact.

I strongly advise everyone to download and run this fix program.