OIT Help Desk

Virus Alert from the OIT Help Desk

W32.Sobig.F@mm is a mass-mailing worm that e-mails itself to addresses found on the local system. The sender address is "spoofed", or forged, it may appear to come from someone you know. The virus extracts addresses from many common address books.

OIT Has received many reports of this virus being present on Indiana State University's Campus with the following characteristics:

The subject will be one of the following random subjects:

Re: Details, Re: Approved, Re: Re: My details, Re: Thank you!, Re: That movie, Re: Wicked screensaver, Re: Your application, Thank you!, Your details

Body: See the attached file for details or Please see the attached file for details.

The attachment will be one of the following:

your_document.pif, document_all.pif, thank_you.pif, your_details.pif, details.pif, document_9446.pif, application.pif, wicked_scr.scr, movie0045.pif

Do not open these email messages -- delete them immediately. If they are opened, do not open the attached pif file. These are malicious computer viruses. You should be cautious about opening any email attachments and consider checking with the sender if you have any concerns about them.

For more information on this virus please visit: http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.html

If you believe your computer may be infected with a virus or a worm, please contact the IT Help Desk at ext. 2910 or via web form:

http://www1.indstate.edu/oit1/userservices/ithelp/get-help-online.html.