Java Mailing List Archive

http://www.junlu.com/

Home » Home (12/2007) » Servlet Interest »

Re: Virus Alert !!

Mark Galbreath

2003-08-22

Replies:

ur about 2 weeks behind the news, dude. Symantec has had an antidote for a
week. And sending crap like that to a mail list is really annoying.

Mark

-----Original Message-----
From: A mailing list for discussion about Sun Microsystem's Java Servlet API
Technology. [mailto:SERVLET-INTEREST@(protected)
Sent: Friday, August 22, 2003 2:31 AM
To: SERVLET-INTEREST@(protected)
Subject: Virus Alert !!


W32/Sobig.f@(protected)
A new variant of W32/Sobig, W32/Sobig.f@(protected).
It arrives as an email attachment with a .pif or .scr extension. When run,
it infects the host computer, then emails itself (using its own SMTP engine)
to harvested email addresses from the victim's machine. In addition, when it
propagates, the worm "spoofs" the "from: field", using one of the harvested
email addresses. So exercise care when opening emails with attachments. An
infected email can come from addresses you recognize.

Because it sends so many emails, a worm like Sobig also saps bandwidth and
slows network performance. Worse, it can also open up a user's computer
port, making it vulnerable to hackers, who can plant dangerous Trojans.
These malicious programs often let unauthorized users remotely take over a
system, steal personal information or use the infected PC to send spam.


What are the common subject lines, attachment names and message content
associated with W32/Sobig.f@(protected)?

Subject:

*   Your details Thank you!
*   Re: Thank you!
*   Re: Details
*   Re: Re: My details
*   Re: Approved
*   Re: Your application
*   Re: Wicked screensaver
*   Re: That movie
*   Re: That movie

Attachment:

*   your_document.pif
*   document_all.pif
*   thank_you.pif
*   your_details.pif
*   details.pif
*   document_9446.pif
*   application.pif
*   wicked_scr.scr
*   movie0045.pif


Body:

*   See the attached file for details
*   Please see the attached file for details

Rgds,
Vijay


____________________________________________________________
Get advanced SPAM filtering on Webmail or POP Mail ... Get Lycos Mail!
http://login.mail.lycos.com/r/referral?aid=27005

___________________________________________________________________________
To unsubscribe, send email to listserv@(protected)
of the message "signoff SERVLET-INTEREST".

Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html

___________________________________________________________________________
To unsubscribe, send email to listserv@(protected)
of the message "signoff SERVLET-INTEREST".

Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html


©2008 junlu.com - Jax Systems, LLC, U.S.A.