Mobile menu

virus alert : Worm W32.Sobig.F
Thread poster: ellitrad

ellitrad
France
Local time: 19:31
German to French
+ ...
Aug 20, 2003

I got this virus today through a mail with email adress marta@proz.com subject Re:your application (with attachment); opening the mail (not the attachment)my mail program got crazy, sending automatically messages to my whole adress book, blocking everything. How to eradicate: stop the Internet connection. The virus generates a exe.file C:\windows\winppr32.exe which you have to delete; if deleting (through Windows Explorer) is not possible, first desactive this exe.program with Task Manager, then delete. Be aware of messages with subjects as "Re:details" "Re:your application" "Re:wicked screeensaver" "Re:thank you!"

Direct link Reply with quote
 

Claudia Iglesias  Identity Verified
Chile
Local time: 13:31
Member (2002)
Spanish to French
+ ...
Look this other thread Aug 20, 2003

There seems to be a solution

http://www.proz.com/topic/13464


Direct link Reply with quote
 

ellitrad
France
Local time: 19:31
German to French
+ ...
TOPIC STARTER
Solution Aug 20, 2003

Claudia Iglesias wrote:

There seems to be a solution

http://www.proz.com/topic/13464[/quote]

Apparently we did NOT open the attachment and it spred anyway, only by opening the email. The solution I used to delete it worked perfectly, and checking the emails on the server before downloading them seems to be a good way not to be contaminated (possible with wanadoo.fr in France)

Direct link Reply with quote
 

Ralf Lemster  Identity Verified
Germany
Local time: 19:31
English to German
+ ...
Sender's address is spoofed Aug 20, 2003

What's important to note here is that the sender's address shown is not genuine - recent email worms usually combine sender's adress, recipient's address and reference line at random.

IOW the chances of that message having been sent by Marta are extremely remote - what is certain is that the infected system sending the message had Marta's address stored.

Best regards, Ralf


Direct link Reply with quote
 

ellitrad
France
Local time: 19:31
German to French
+ ...
TOPIC STARTER
infected address book Aug 21, 2003

[quote]Ralf Lemster wrote:

IOW the chances of that message having been sent by Marta are extremely remote - what is certain is that the infected system sending the message had Marta\'s address stored.

I clearly didn\'t mean Marta was the sender, and I share your point of view, I just posted this topic because I thought that other ProZ members were at risk of being infected too, and apparently this worm is quite new in France.
Regards
Marie Ellie


Direct link Reply with quote
 

Ralf Lemster  Identity Verified
Germany
Local time: 19:31
English to German
+ ...
Just to avoid misunderstandings... Aug 21, 2003

Hi Marie,
I clearly didn't mean Marta was the sender, and I share your point of view, I just posted this topic because I thought that other ProZ members were at risk of being infected too, and apparently this worm is quite new in France.

I know you didn't want to implicate Marta - it's just that we had loads of misunderstandings when the Bugbear worm (IIRC the first worm to spoof addresses) started spreading.

Sobig as such isn't that new, but the Sobig.F variant is - and it seems to be very aggressive, judging by the number of reported attacks or contaminations. Thanks for posting the warning.

Best regards, Ralf


Direct link Reply with quote
 


To report site rules violations or get help, contact a site moderator:


You can also contact site staff by submitting a support request »

virus alert : Worm W32.Sobig.F

Advanced search






Protemos translation business management system
Create your account in minutes, and start working! 3-month trial for agencies, and free for freelancers!

The system lets you keep client/vendor database, with contacts and rates, manage projects and assign jobs to vendors, issue invoices, track payments, store and manage project files, generate business reports on turnover profit per client/manager etc.

More info »
memoQ translator pro
Kilgray's memoQ is the world's fastest developing integrated localization & translation environment rendering you more productive and efficient.

With our advanced file filters, unlimited language and advanced file support, memoQ translator pro has been designed for translators and reviewers who work on their own, with other translators or in team-based translation projects.

More info »



All of ProZ.com
  • All of ProZ.com
  • Term search
  • Jobs