[dshield] Sobig Help

R Shady RShady at stny.rr.com
Wed Aug 20 15:55:15 GMT 2003


There are various strains-each contains removal instructions:

http://search.symantec.com/custom/us/query.html

Allan Liska wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: MD5
> 
> 
> I know this sounds silly, but I could really use some help from the
> list.  It appears my mother-in-law was infected by one of the Sobig
> variants.  As of right now, Norton has not been able to detect it, so
> do you all know what files I should look for and delete to remove the
> virus (no one on the network I manage has been infected -- everything
> is blocked at the server -- so I have not had to dissect one of these
> worms yet).
> 
> Any help you can provide will go a long way toward saving my marriage
> ;).
> 
> Thanks!
> 
> 
> allan
> - --
> Allan Liska
> allan at allan.org
> http://www.allan.org
> http://www.hosthideout.com
> 
> -----BEGIN PGP SIGNATURE-----
> Version: 2.6
> 
> iQCVAwUAP0OTlikg6TAvIBeFAQEMugP/WkcgFgGBJC41Npbm3D29HK1DsODHp+Vz
> 9czYbFvcgf7JLbaY09ryIgA9jcuqunaAYiHNASbeG/rCdBSs2/fRpslJc0BPYpK1
> f8z/wRLT3pYJSzbv2sbTbsma3UEn8mYytV2El1lXwsZUHqNiFgD6JOFhIdvk7iF0
> wAJo8MA77t8=
> =AKDu
> -----END PGP SIGNATURE-----
> 
> 
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list
> 





More information about the list mailing list