Security Information

How to Get Rid of New Sobig.F Virus?


As you know, this time the virus under the name Sobig.F has wreaked quite havoc! No doubt, many of us have suffered from this recent virus outbreak.

According to an online poll conducted by CNN: 32% of respondents were infected with this malicious virus. At the pick, each of every 17 emails contained sobig.F! Internet service provider AOL says it scanned 40.5 million emails and found the virus in more than half of them. Sobig accounted for 98 percent of all viruses found in these emails.

What is Sobig.F virus?

This is a worm type of virus. Which means it is an executable program that installs enhancement to your Windows operating system. The 'F" implies that it is the sixth of the family of Sobig viruses. The first one was launched in the beginning of this year. The latest attack was started on August 19.

According to some experts, Sobig.F was first posted to a porn Usenet group and spread from there. It is timed to deactivate itself on September 10. The pre-built deactivation mechanism itself is a worrisome factor. Most experts think this means there are more to come!

How it works?

Sobig.F comes along with an email with subject headers like Your details, Thank you!, Re: Thank you!, Re: Details, Re: Re: My details, Re: Approved, Re: Your application, Re: Wicked screensaver or Re: That movie. The body of the message is quite short and usually contains either "See the attached file for details" or "Please see the attached file for details."

Once the file is opened, Sobig.F resends itself using a built-in mailing program to e-mail addresses from the infected computer. As a sender is address it shows one of the e-mails randomly selected from the computer's address book. The worm was also supposed to attempt to retrieve an URL from a predetermined list of 20 master servers on a certain date and time. The content of that URL was to be downloaded and executed on the infected machines. Luckily those servers were identified right away and shut down.

How to protect yourself against it?

If your computer is infected or you have doubts, first thing you should do is: to check and clean up your computer from this virus. Although, it is set to deactivate on September 10, which means it will no longer multiply itself, however, left untouched, it might attempt to update itself, once the newer version of the virus comes out.

Suggestion One:

1. If you do not have latest version of anti-viruses installed, go to the Symantec's following page: http://www.symantec.com/avcenter/venc/data/w32.sobig.f@mm.html,

2. Down load the Sobig.F removal tool for completely free of charge.

3. Install and run it by strictly following the steps described on the page.

Suggestion Two:

Download the latest security patches for your version of Windows and install them.

Suggestion Three:

If you are using Microsoft Outlook, follow the steps below to stop them appearing in your inbox:

- Open Outlook

- Click on "Tools" from main menu

- Choose Rules Wizard from the drop down menu

- On the page "Apply changes to this folder": Click on "New"

- Select "Start creating a rule from Templates"

- Choose "Move messages based on content"

- Click on " specific words" link from the box at the bottom

- A small window will appear, add each and every phrase scrupulously

from the list below:

Re: Thank you!

Thank you!

Your details

Re: Details

Re: Re: My details

Re: Approved

Re: Your application

Re: Wicked screensaver

Re: That movie

And

your_document.pif

document_all.pif

thank_you.pif

your_details.pif

details.pif

document_9446.pif

application.pif

wicked_scr.scr

movie0045.pif

- Once finished click on "OK" to close the window.

- Click on the link "specified" at the same box

- Open a new folder by clicking on the "New" button under the

name "Virus Spam"

- Click on "OK"

- Click on "Finish"

- From now on all emails with the above mentioned phrases and

attachments will be moved to the "Virus Spam" folder.

- All you have to do is delete the emails, which will appear there.

A few more cautions:

Don't open any executable attachment in an email, unless you are hundred percent sure that this is a legitimate file that you have been expecting.

Install an anti-virus program and update it on time, at the end, this might be the best possible solution to protect ourselves from these ugly online creatures!

Nowshade Kabir is the founder, primary developer and present CEO of Rusbiz.com - a Global B2B Exchange with solutions to create e-catalog, Web store, business process management and other features to run a business online. You can read various articles written by Nowshade Kabir at http://ezine.rusbiz.com.


MORE RESOURCES:

Times Online

Iraqi PM: immunity remains sticking point in security pact
Xinhua, China - 12 hours ago
... had made concessions in the negotiation of a bilateral security treaty, but the immunity for American troops and civilians in Iraq remains unsolved. ...
Iraq's FM: 'Bold' decisions needed on bases deal The Associated Press
Negroponte Calls Security Deal on Iraq ‘Close’ New York Times
Iraqi leaders seek to secure US funding, indirectly Stars and Stripes
AFP - ISRIA (subscription)
all 526 news articles


Wired News

US Security Agency operators eavesdrop on Americans abroad
Press Trust of India, India - 21 hours ago
New York, Oct 10 (PTI) The US' National Security Agency's (NSA) intercept operators spent their time eavesdropping on saucy conversations between Americans ...
Inside Operation Highlander: the NSA's Wiretapping of Americans ... Wired News
Will Senate actually investigate NSA spying on Americans? CNET News
US Spies on Americans Intimate Calls Islam Online
New York Times - Los Angeles Times
all 140 news articles


Trend Micro Presents 'The Marriage of Security and Cloud Computing ...
MarketWatch - 7 hours ago
Security experts predict over 25000 new threats per hour by 2015, lengthening a security provider's "time to protect" -- the overall time it takes for ...


Boston Globe

Elections officials deny illegally purging voters
The Associated Press - 23 hours ago
The New York Times based its findings on reviews of state records and Social Security data, and said it had identified apparent problems in Colorado, ...
Colorado to Review How It Purges Voters’ Names New York Times
Battle For The West: Voter Roll Purges in CO and NV, State ... Huffington Post
NC to change the way it vets its new voters News & Observer
WSBT-TV - New York Times
all 673 news articles


The Associated Press

Iran opposes US-Iraq security deal
The Associated Press - Oct 9, 2008
TEHRAN, Iran (AP) — A top Iranian military official on Tuesday urged Iraq to reject a proposed US-Iraqi security deal, calling the agreement a "disgrace. ...
Iran reiterates support for security in Iraq Tehran Times
Iran opposes US-Iraq security deal International Herald Tribune
The Health of the "Sick Man" Dar Al-Hayat
MehrNews.com - ISRIA (subscription)
all 274 news articles


The Associated Press

Ford shares post 8th-straight day of declines
Forbes, NY - 2 hours ago
The low marked Ford's lowest share price since May 31, 1983, according to the Center for Research in Security Prices at the University of Chicago. ...
GM shares fall 30 percent after S&P statement The Associated Press
GM shares tumble to 58-year low International Herald Tribune
Dow falls below 8600; GM stock drops 30 percent, hits lowest level ... DetNews.com
Detroit Free Press - USA Today
all 307 news articles


Security Bank of California Completes Formation of Bank Holding ...
MarketWatch - Oct 9, 2008
reported today that it has established Security California Bancorp, a California corporation and bank holding company. As a result of this transaction, ...


Bush ex-aide says economic woes a security risk
Reuters - 4 hours ago
Frances Townsend, who chaired the Homeland Security Council from 2004 until January this year, said it was vital that the campaigns of presidential ...


Security Bank of California Relocates its San Bernardino Branch
MarketWatch - 5 hours ago
Security Bank of California Forward Looking Statement Disclaimer - General Form This release may contain forward-looking statements that are subject to ...


Devcon International agrees with its Preferred Investors on ...
RTT News, NY - 1 hour ago
OB: News ) said Friday it reached an agreement with its preferred investors on a restructuring of their security. The restructuring follows the recently ...
Devcon International Corp. Announces Signing of Restructuring ... MarketWatch
all 29 news articles

Security - Google News

home | site map
© 2006