[Dshield] Sobig Help

Paul Marsh pmarsh at nmefdn.org
Wed Aug 20 15:41:55 GMT 2003


Complete details:
http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.html

Removal tool:
http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.removal.tool.html

-----Original Message-----
From: Allan Liska [mailto:allan at allan.org]
Sent: Wednesday, August 20, 2003 11:28 AM
To: dshield
Subject: [Dshield] Sobig Help


-----BEGIN PGP SIGNED MESSAGE-----
Hash: MD5


I know this sounds silly, but I could really use some help from the
list.  It appears my mother-in-law was infected by one of the Sobig
variants.  As of right now, Norton has not been able to detect it, so
do you all know what files I should look for and delete to remove the
virus (no one on the network I manage has been infected -- everything
is blocked at the server -- so I have not had to dissect one of these
worms yet).

Any help you can provide will go a long way toward saving my marriage
;).

Thanks!


allan
- --
Allan Liska
allan at allan.org
http://www.allan.org
http://www.hosthideout.com

-----BEGIN PGP SIGNATURE-----
Version: 2.6

iQCVAwUAP0OTlikg6TAvIBeFAQEMugP/WkcgFgGBJC41Npbm3D29HK1DsODHp+Vz
9czYbFvcgf7JLbaY09ryIgA9jcuqunaAYiHNASbeG/rCdBSs2/fRpslJc0BPYpK1
f8z/wRLT3pYJSzbv2sbTbsma3UEn8mYytV2El1lXwsZUHqNiFgD6JOFhIdvk7iF0
wAJo8MA77t8=
=AKDu
-----END PGP SIGNATURE-----


_______________________________________________
list mailing list
list at dshield.org
To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list




More information about the list mailing list