[Dshield] Sobig Help

Doug White doug at clickdoug.com
Wed Aug 20 15:50:17 GMT 2003


Full instructions for removal and free removal tools are at:

http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.html

======================================
Stop spam on your domain, use our gateway!
For hosting solutions http://www.clickdoug.com
ISP rated: http://www.forta.com/cf/isp/isp.cfm?isp_id=772
======================================
If you are not satisfied with my service, my job isn't done!

----- Original Message ----- 
From: "Allan Liska" <allan at allan.org>
To: "dshield" <list at dshield.org>
Sent: Wednesday, August 20, 2003 10:28 AM
Subject: [Dshield] Sobig Help


| -----BEGIN PGP SIGNED MESSAGE-----
| Hash: MD5
|
|
| I know this sounds silly, but I could really use some help from the
| list.  It appears my mother-in-law was infected by one of the Sobig
| variants.  As of right now, Norton has not been able to detect it, so
| do you all know what files I should look for and delete to remove the
| virus (no one on the network I manage has been infected -- everything
| is blocked at the server -- so I have not had to dissect one of these
| worms yet).
|
| Any help you can provide will go a long way toward saving my marriage
| ;).
|
| Thanks!
|
|
| allan
| - --
| Allan Liska
| allan at allan.org
| http://www.allan.org
| http://www.hosthideout.com
|
| -----BEGIN PGP SIGNATURE-----
| Version: 2.6
|
| iQCVAwUAP0OTlikg6TAvIBeFAQEMugP/WkcgFgGBJC41Npbm3D29HK1DsODHp+Vz
| 9czYbFvcgf7JLbaY09ryIgA9jcuqunaAYiHNASbeG/rCdBSs2/fRpslJc0BPYpK1
| f8z/wRLT3pYJSzbv2sbTbsma3UEn8mYytV2El1lXwsZUHqNiFgD6JOFhIdvk7iF0
| wAJo8MA77t8=
| =AKDu
| -----END PGP SIGNATURE-----
|
|
| _______________________________________________
| list mailing list
| list at dshield.org
| To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list
|
|




More information about the list mailing list