Technorati
Digg
Delicious
Reddit
StumbleUpon
Facebook
Yahoo
Twitter
Faves
Newsvine
- Discovered:
- June 18, 2003
- Updated:
- February 13, 2007 12:02:43 PM
- Also Known As:
- I-Worm.Sobig.gen [KAV], W32/Sobig.d@MM [McAfee], Win32.Sobig.D [CA], WORM_SOBIG.D [Trend], W32/Sobig-D [Sophos]
- Type:
- Worm
- Systems Affected:
- Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
W32.Sobig.D@mm is a mass-mailing worm that sends itself to all the email addresses it finds in the files with the following extensions:
- .wab
- .dbx
- .htm
- .html
- .eml
- .txt
The email falsely purports that admin@support.com sent it.
Email routine details
The email message has the following characteristics:
From: admin@support.com (NOTE: W32.Sobig.D@mm spoofs this field. It could be any address.)
Subject: The subject line will be one of the following:
- Re: Documents
- Re: App. 00347545-002
- Re: Movies
- Application Ref: 456003
- Re: Your Application (Ref: 003844)
- Re: Screensaver
- Re: Accepted
- Your Application
Message Body: See the attached file for details
Attachment: The attachment name will be one of the following:
- Document.pif
- app003475.pif
- movies.pif
- ref_456.pif
- Application844.pif
- Screensaver.scr
- Accepted.pif
- Applications.pif
- Application.pif
NOTE: The worm de-activates on July 2, 2003, and therefore, the last day on which the worm spreads is July 1, 2003.
Antivirus Protection Dates
- Initial Rapid Release version June 18, 2003
- Latest Rapid Release version June 16, 2010 revision 040
- Initial Daily Certified version June 18, 2003
- Latest Daily Certified version June 17, 2010 revision 003
- Initial Weekly Certified release date June 18, 2003
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
- Wild Level: Low
- Number of Infections: 0 - 49
- Number of Sites: 0 - 2
- Geographical Distribution: Low
- Threat Containment: Easy
- Removal: Easy
Damage
- Damage Level: Low
Distribution
- Distribution Level: High
Writeup By: Sergei Shevchenko
