pressetext.europe
pressetext.europe
Contact:
Newsfox Desk
Phone: + 43 - 1 - 811 40 - 319
E-Mail: editor@newsfox.com
KEYWORDS:
HIGHTECH
Mon, 02.06.2003
Print
pte20030602037 Computer/Telecommunications
Pressbox Pressbox
Sobig.C virus racing through the web
Programmed to stop spreading on 8 June

Internet (pte037/02.06.2003/14:48) - Virus hunters Sophos http://www.sophos.com or Symantec http://www.symantec.com have warned about a new variety of the Sobig worm that is spreading rapidly on the Internet.

The Sobig.C virus first appeared last weekend. Like its predecessors, the worm will only be active for a week and will automatically deactivate its self-spreading mechanism on 8 June. If an attachment is opened after this date, the virus will install itself but no longer attempt to spread from that user's PC to another.

Sobig.C sends itself to all e-mail addresses in the victim's address book. The sender name is picked from 52 possibilities that include addresses such as *@microsoft.com or *@winzip.com .

According to Symantec, e-mails containing Sobig.C are labelled with one of seven subject lines: "Re:Movie", "Re:Submitted (004756-3463)", "Re: 45443-343556", "Re: Approved", "Approved", "Re: Your application" or "Re: Application".

The attachment harbouring the live virus is disguised as a word document or screen saver. The virus's predecessor Sobig.B appeared in mid May and was nicknamed "Palyh".

(end)
Submitter: pressetext.europe
Contact: Newsfox Desk
Phone: + 43 - 1 - 811 40 - 319
E-Mail: editor@newsfox.com
Website:
pressetext.europe