1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

New Worm: [email protected]

Discussion in 'Virus & Other Malware Removal' started by Endemix, Jan 9, 2003.

Mark Solved
Thread Status:
Not open for further replies.
  1. Endemix

    Endemix Guest Thread Starter

    [email protected] is a mass-mail worm that will send itself to all recipients it finds in .txt, .eml, .html, .htm, .dbx, and .wab files. The e-mail message will have the following characteristics:

    Subjects:

    Re: Movies
    Re: Sample
    Re: Document
    Re: Here is that sample
    Attachment Names:
    Movie_0074.mpeg.pif
    Document003.pif
    Untitled1.pif
    Sample.pif

    The worm will also attempt to copy itself to the following directories on all open network shares:
    Windows\All Users\Start Menu\Programs\StartUp
    Documents and Settings\All Users\Start Menu\Programs\Startup

    The worm also sends a message to an address at pagers.icq.com prior to sending e-mail messages.


    Also Known As: W32/Sobig [McAfee]
    Type: Worm
    Infection Length: 65,536 bytes
    Systems Affected: Windows 95, Windows 98, Windows NT, Windows 2000, Windows XP, Windows Me
    Systems Not Affected: Macintosh, OS/2, UNIX, Linux

    More info...
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/112409

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice