All the latest UK technology news, reviews and analysis

SoBig worm brags its way onto the web

by Iain Thomson

14 Jan 2003

Be the first to comment

  • Tweet this

A new worm, similar to Yaha, has been discovered in the wild, mainly in the UK and The Netherlands.

'SoBig-A' affects PCs running Windows 95 onwards. It contains an SMTP engine to mail itself out to all addresses on the PC, and can spread through network shares.

The worm is easy to spot, with just four subject headers and attached file names.

These are: 'Re: Movies', 'Re: Sample', 'Re: Document' and 'Re: Here is that sample'.

The infected attachments are: 'Document003.pif', 'Sample.pif', 'Untitled1.pif' and 'Movie_0074.pif'.

Carole Theriault, antivirus specialist at Sophos, said: "We're not getting a lot of new reports as companies have got patches in fast. Basically, if you block .pif files anyway you won't be troubled by this one."

The worm also attempts to download and run software from an external website.

All antivirus software vendors have a patch available.

Do you agree?

 

Add your comment

We won't publish your address
By submitting a comment you agree to abide by our Terms & Conditions. Your comment will be moderated before publication.

Poll

Flame virus poll

Are you confident that the UK's IT infrastructure is secure from attack in the wake of the Flame malware revelations?

25%

1%

11%

63%

Connect with V3.co.uk

Sign up to our daily or weekly newsletters

Riso

Colour printing: why the bill keeps outstripping the budget

The wrong printers, for the wrong tasks on the wrong contracts

Qlikview

Magic quadrant for business intelligence platforms

Who leads the BI pack and who should we be watching out for?

Helpdesk/Service Analyst x3

Helpdesk/Service Analyst x 3 3 Month Contract...

2nd/3rd line Technical support EMEA (FRENCH SPEAKING)

French Technical support Specialist (2/3rd Line) CCNA...

ECM Project Manager - CMS, Document Management, Web 2.0

ECM Project Manager - CMS, "Document Management", Web...

PRESALES CONSULTANT/TECHNICAL CONSULTANT (CCNA, MCITP)

Skills - Presales, Consultant / Consultancy, Technical...

To send to more than one email address, simply separate each address with a comma.