Home page logo

basics logo Security Basics mailing list archives

Re: Annoying virus being mailed to me
From: Bob <bob () crucialpc com>
Date: Fri, 07 Feb 2003 15:34:59 -0500

Hey Chris and all,

We have seen some of this on our network as well. It (I-Worm/Sobig) appears to be just another worm that spreads via email on Windows boxes. Like so many of the others, once it infects a users machine, it collects their email addresses (from WAB, HTML, DBX, EML, and so forth) and sends itself back out to those unsuspecting people. It uses its own SMTP to mail infected messages (which is why it appears to originate from big () boss com). The original IP changes because it is actually being sent from various other infected people, as opposed to being sent from one specific person.

So, I don't think you are actually being targeted. You just happen to be in the address book of a few infected people.


At 10:54 AM 2/7/2003 +0100, you wrote:
Hi guys,

For the last two months or so I have been receiving emails with the
I-Worm/Sobig virus attached about twice a day. My anti-virus sw protects
me well so I am not infected in any way (nor has anybody else here).
Initially, I used to ignore the messages and delete them; after a couple
of weeks I decided to trace the source IP from the mail header and send
complaint messages to the corresponding ISP. But the Bast**d keeps
finding other IP's to mail me from. Messages come from big () boss com  Is
anyone else being targeted? Is this a common occurrence? Am I the only


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]