Contact:
Newsfox Desk
Phone: + 43 - 1 - 811 40 - 319
E-Mail: editor@newsfox.com
Pressbox |
Internet (pte037/02.06.2003/14:48) - Virus hunters Sophos http://www.sophos.com or Symantec http://www.symantec.com have warned about a new variety of the Sobig worm that is spreading rapidly on the Internet.
The Sobig.C virus first appeared last weekend. Like its predecessors, the worm will only be active for a week and will automatically deactivate its self-spreading mechanism on 8 June. If an attachment is opened after this date, the virus will install itself but no longer attempt to spread from that user's PC to another.
Sobig.C sends itself to all e-mail addresses in the victim's address book. The sender name is picked from 52 possibilities that include addresses such as *@microsoft.com or *@winzip.com .
According to Symantec, e-mails containing Sobig.C are labelled with one of seven subject lines: "Re:Movie", "Re:Submitted (004756-3463)", "Re: 45443-343556", "Re: Approved", "Approved", "Re: Your application" or "Re: Application".
The attachment harbouring the live virus is disguised as a word document or screen saver. The virus's predecessor Sobig.B appeared in mid May and was nicknamed "Palyh".
(end)
|