A worm's story from Sobig to Sobig.C + 21 letters

[support]

Η εξέλιξη ενός από τους εκατοντάδες Worms που υπάρχουν και θα υπάρξουν

 

 

 

"SoBig" - Still Big Enough

The SoBig worm is getting around despite available fixes and being easy to spot.

 

Antivirus vendors have long ago (about one full month) updated their virus definition databases, but still the "SoBig" worm, a virus affecting computers running all Windows operating systems subsequent to and including Windows 95 is still getting around. The worm has an SMTP engine that it uses to send itself to all recipients in a victim machine's address book. It also spreads via network shares.

 

 

 

http://www.virusinfo.bz/UBB/ultimatebb.php?ubb=get_topic;f=11;t=000001

 

 

 

 

 

Sobig.B (also known as Palyh or Mankx) was first seen on Sunday, 18th of May. Since then it has been spreading at an increasing pace. Largest infections seem to be in UK and USA.

 

The worm spreads via e-mail attachments and Windows network shares. The e-mails sent by the worm pretend to come from [email protected] and they contain the message text "All information is in the attached file".

 

 

 

http://www.virusinfo.bz/UBB/ultimatebb.php?ubb=get_topic;f=11;t=000035

 

 

 

 

 

This is the sordid tale of how a lone computer virus opened the door for millions of spam emails every day worldwide. In order for the reader to understand how this happened, this paper will explain some concepts in spam, viruses and backdoors. Viruses sometimes leave backdoors, also known as "trojans" on systems they infect; this is nothing new.

 

 

 

http://www.virusinfo.bz/UBB/ultimatebb.php?ubb=get_topic;f=11;t=000042

 

 

 

Sobig.B (also known as Palyh or Mankx) was first seen on Sunday, 18th of May. Since then it has been spreading at an increasing pace. Largest infections seem to be in UK and USA.

 

 

 

http://www.virusinfo.bz/UBB/ultimatebb.php?ubb=get_topic;f=11;t=000044

 

 

 

Sobig.C was first seen on Sunday, 1st of June. The very same date that was set to be the end of Sobig.B life. Since then it has been spreading at an increasing pace.

 

The worm spreads via e-mail attachments and Windows network shares. The e-mails sent by the worm pretend to come from addresses collected from the users' machines and they contain the message text "Please see the attached file.".

 

In addition to the e-mail spreading, Sobig.C will search for Windows machines within the infected Local Area Network and will try to copy itself to their Startup folder. This will fail unless users are sharing their Windows directories with write access a thing that should never be done.

 

 

 

http://www.virusinfo.bz/UBB/ultimatebb.php?ubb=get_topic;f=11;t=000051