Protect your corporate IT network from hackers and other unwanted intruders with Proxy Sentinel™. Click here for all the details and get the peace of mind you deserve.
Back to our Homepage Proxy Sentinel™ high performance Internet proxy server and secure firewall solution Firewall Sentinel™ secure & powerful Internet firewall solution About Internet Security.ca and GCIS Frequently Asked Questions on Internet security issues Internet Security Industry News - Stay informed of what's happening Contact Internet Security.ca today and order your Proxy Sentinel™ or Firewall Sentinel™ server now!

Internet Security Industry News

How to protect yourself from Sobig. F

Save your company's valuable data with Proxy Sentinel™ from Internet Security. Click here for all the details.

August 25, 2003

The Sobig.F worm is a variant of June's Sobig. A worm. The worm is also known as I-Worm.Sobig.f, W32/Sobig.F-mm, W32/Sobig.f@MM, and WORM_SOBIG.F. Sobig.F only affects Windows systems, and it has been spreading rapidly since earlier this week.

Machines running Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, and Windows XP are all susceptible to the worm. On an infected system, the worm scans various documents for e-mail addresses. The worm then distributes itself to other inboxes using a built-in SMTP engine.

The way the Sobig.F worm distributes itself makes it hard to trace the string of infected computers. Instead of sending out copies from the PC owner's e-mail address, it uses an address found somewhere on the infected machine. This method of delivery is called "spoofing."

The worm also has a built-in shutoff date. It'll stop working on September 10, 2003. Here is how to protect yourself:

1) Delete any e-mail with the following subject lines, even if they're sent from a familiar name:

   * Thank you!
   * Your details
   * Re: Details
   * Re: Approved
   * Re: Re: My details
   * Re: Thank you!
   * Re: That movie
   * Re: Wicked screensaver
   * Re: Your application

Don't open any email attachments, especially those with the following names:

   * your_document.pif
   * document_all.pif
   * thank_you.pif
   * your_details.pif
   * details.pif
   * document_9446.pif
   * application.pif
   * wicked_scr.scr
   * movie0045.pif
   * Remove Sobig.F From Your System

Several anti-virus software makers have released tools that will help remove the bug from your system. If you think your Windows PC has been infected, visit these sites:

McAfee's free Stinger virus cleanup tool:
www.vil.nai.com/vil/averttools.asp#stinger

Symantec's free Sobig.F removal tool:
securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.removal.tool.html

TrendMicro's free malware removal tool
www.trendmicro.com/download/tsc.asp

Source: ABC News


Save Internet Security.ca's URL to the list of your favorite web sites
in your Web browser by clicking here.

Back to the top of the page.         

You can link to the Internet Security web site as much as you like. Read our section on how your company can participate in our reciprocal link exchange program and increase your rankings in the major search engines such as
Google and all the others.

Click here to order your Proxy Sentinel™ Internet security server today!

Proxy Sentinel™ is the most secure Internet proxy server on the market today. Click here for more information.
Site optimized by Pagina+™
Powered by Sun Hosting
Search engine keywords by Rank for Sales
Development platform by My Web Services
Internet Security.ca is listed in
Global Business Listing

| Home | Proxy Sentinel™ | Firewall Sentinel™ | FAQ | News | Sitemap | Contact |
Copyright © Internet Security.ca 2003    Terms of use    Privacy agreement    Legal disclaimer