A new variant of the SoBig worm has been filling inboxes worldwide, after it was mass-mailed to millions of email addresses.
The worm arrives as a .Pif (Program Information file) attachment in emails with the headers:

SoBig is so prevalent, as sixth variant mass mails itself around the world
vnunet.com, 19 Aug 2003
A new variant of the SoBig worm has been filling inboxes worldwide, after it was mass-mailed to millions of email addresses.
The worm arrives as a .Pif (Program Information file) attachment in emails with the headers:
The worm is 72,000 bytes. Once activated it copies itself to Windows as 'winppr32.exe' and edits the registry to ensure that it starts whenever the computer boots.
All email addresses on the PC are collected and are then sent copies of the worm using the worm's own SMTP engine.
Email headers are spoofed to hide the location of infected machines, and it can also be spread using network shares.
"SoBig.F seems to be extremely prevalent," said Graham Cluley, senior analyst at antivirus company Sophos.
"We suspect the author must have spammed it to millions of people, which gave it a huge head start in infections.
"As with all the other SoBig variants, if IT managers would just block .Pif files at the firewall they'd have very few problems."
This is the sixth variant on the SoBig worm, which first surfaced in January of this year.
All operating systems from Windows 95 to XP are affected, although the worm will automatically deactivate on 10 September.
Fears lead to increased budgets to fight hacking and virus attacks
Antivirus company warns of new SoBig worm on the way after version F goes away

First Looks Editor Ian Williams gets hands on with the Sony Ericsson Xperia X1

Google's announcement this week that it plans to step into...
Do you agree?
Have your say on this article