Skip to main content

MCC Daily Tribune Archive

SoBig e-mail Virus


Another new virus code-named W32/Sobig.F-mm also known as the Sobig virus is spreading its way across the US.  You can recognize the virus by the subject line which typically says “Re: Details," "Resume" or "Thank you."   The attachment names may include: your_document.pif, details.pif, your_details.pif, thank_you.pif, movie0045.pif, document_Fall.pif, application.pif, and document_9446.pif.

MCC's e-mail virus scanner is successfully identifying and removing the “virus” from your
e-mail.  The e-mail system lets you receive the message, along with any text in the body of the message, but it doesn’t send the virus along with it.  It replaces the infected attachment with an attachment that says the following:

FILE DELETED
------------

Antigen for Exchange removed document_all.pif since it
was found to match the FILE FILTER= *.pif file filter.

Therefore you are not being infected when you see these e-mails in your inbox.  The e-mails are annoying but harmless.   Just delete the e-mails from your inbox.

Donna Pogroszewski
Communications and Network Services
08/22/2003