MS Blaster

[Don Baker]

I also got the worm and when I learned it had infected my
computer I went to the Microsoft site and down loaded the
updates for Windows XP (Home Edition)and also the fix to
get rid of the worm/virus. I checked back to the
Microsoft site a day later to see if there were any more
updates and I received the message "No updates available
for your operating system. Today I sent an e-mail to
several of my friends and I received the following
reply:

McAfee ASaP has detected that the e-mail message you have
sent below contains a harmful virus. The message has been
quarantined.

The infected message's properties are:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Sender: (e-mail address removed)
Receiver: (e-mail address removed)
Virus Name: W32/Sobig.f@MM
Original Attachment Name: your_details.pif
Transmission Date Time: 08/29/2003 10:50:42
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

The intended recipient's System Administrator(s) has been
notified. They may choose to delete this message or
request receipt at their own risk.

Sincerely,
McAfee ASaP Customer Care


-----------------------------------------------
McAfee ASaP
http://WWW.McAfeeASaP.com
-----------------------------------------------

The ironic thing is this recipients e-mail address was
deleted from my address book several months ago and I
just checked again and it is NOT in my address book. Can
anyone tell me if I am still in trouble with the
worm/virus? Thank you very much, Don Baker Cedar Park, TX

 

[Mike Brearley]

I also got the worm and when I learned it had infected my
computer I went to the Microsoft site and down loaded the
updates for Windows XP (Home Edition)and also the fix to
get rid of the worm/virus. I checked back to the
Microsoft site a day later to see if there were any more
updates and I received the message "No updates available
for your operating system. Today I sent an e-mail to
several of my friends and I received the following
reply:

McAfee ASaP has detected that the e-mail message you have
sent below contains a harmful virus. The message has been
quarantined.

The infected message's properties are:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Sender: (e-mail address removed)
Receiver: (e-mail address removed)
Virus Name: W32/Sobig.f@MM

The ironic thing is this recipients e-mail address was
deleted from my address book several months ago and I
just checked again and it is NOT in my address book. Can
anyone tell me if I am still in trouble with the
worm/virus? Thank you very much, Don Baker Cedar Park, TX

The sobig virus masks the sender's (from) address. An infected PC would use
an address from that users address book and put it in the from field and
then mass mail itself out. Someone that has you in their address book was
infected with the sobig virus and it chose your e-mail address to use in the
from field.

Don't worry, you aren't infected.

--
Posted 'as is'. If there are any spelling and/or grammar mistakes, they
were a direct result of my fingers and brain not being synchronized or my
lack of caffeine.

Mike Brearley