Toolkit

Story: Sobig.F is 'worst variant yet'

• 
• 

The worm uses false e-mail addresses when he copies itself--that is, it looks like it's coming from you, when it actually is stemming off someone elses computer. I had the same thing happen, but if you've checked for the .exe file in your WINNT folder & it isn't there, chances are you don't have it. Especially if you haven't opened a .pif file. Most of the websites I checked said the .pif files must be run manually in order to infect, so the worst effect you should have is a crap load of spam. Check out http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.html for more info. Good luck!

• 
• 

• 
• 
• 

Full Talkback thread