W32.Sobig.E@mm question

[Kev]

I was using Outlook Web Access into the firm's Exchange server across the
net and I got an e-mail from a colleague (who I don't think I know) saying
that an e-mail from me - apparently sent by me this afternoon - had the
W32.Sobig.E@mm virus infected attachment.

I've scanned my machine (XP Pro) and don't see any sign of it - quick look
in the registry and in the processes showed nothing. I've run the McAfee
Stinger utility and found nothing with that either.

I don't double click on attachments, even from trusted people, before
scanning them and my machine always has the latest version on McAfee
running.

What's going on ?

Many thanks

 

[Lyle H. Gray]

I was using Outlook Web Access into the firm's Exchange server across
the net and I got an e-mail from a colleague (who I don't think I
know) saying that an e-mail from me - apparently sent by me this
afternoon - had the W32.Sobig.E@mm virus infected attachment.

I've scanned my machine (XP Pro) and don't see any sign of it - quick
look in the registry and in the processes showed nothing. I've run
the McAfee Stinger utility and found nothing with that either.

I don't double click on attachments, even from trusted people, before
scanning them and my machine always has the latest version on McAfee
running.

It is in the design of W32.Sobig.E@mm that both the TO: address _and the
FROM:_ address are taken out of an infected computer's address book.
Basically, someone who has both your email address and your colleague's
email address has the virus infecting their computer. You would need to
look at the full headers for the infected email to have some idea where
the message actually came from.