w32.SoBig.F email virus that appeared recently. - GoFuckYourself.com

crockett · 08-19-2003, 06:54 PM

http://securityresponse.symantec.com...r/FixSbigF.exe
that's a fix from Symantec.

http://[email protected]

for more information go there.

j3ff · 08-19-2003, 06:58 PM

Following my last post...
For those of you that know how to work with registry:

In that key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run

There should be a value named:

"TrayX"="%Windir%\winppr32.exe /sinc"

remove it! the virus wont start when windows boots if you remove it, then you can proceed and do the other steps with the virus removal tool from symantec... I don't know if it does clean the registry...

and why my first post shows my name as CROCKETT I ain't from florida either ?! bug?

Theo · 08-19-2003, 07:08 PM

W32.Sobig.F@mm has not been found on your computer

of course emails still coming every few sec!

j3ff · 08-19-2003, 07:12 PM

thats good if you dont have it, it means you're not infected, it means you didnt run any attachments, good boy.

Theo · 08-19-2003, 07:16 PM

i never run them, but still pretty often due to some missing w2k update i manage to get infected....and all this because i insist to use outlook

Nbritte · 08-19-2003, 07:40 PM

This one must have gotten out quick I have gotten over 1500 emails with it today so far but nortons did an auto update before they started showing up and has been delete all the viruses

Nbritt

08-19-2003, 06:54 PM	#1
crockett in a van by the river Industry Role: Join Date: May 2003 Posts: 76,806	http://securityresponse.symantec.com...r/FixSbigF.exe that's a fix from Symantec. http://[email protected] for more information go there. __________________ In November, you can vote for America's next president or its first dictator.

08-19-2003, 06:58 PM	#2
j3ff Confirmed User Join Date: Jun 2003 Location: Quebec city Posts: 690	Following my last post... For those of you that know how to work with registry: In that key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run There should be a value named: "TrayX"="%Windir%\winppr32.exe /sinc" remove it! the virus wont start when windows boots if you remove it, then you can proceed and do the other steps with the virus removal tool from symantec... I don't know if it does clean the registry... and why my first post shows my name as CROCKETT I ain't from florida either ?! bug? __________________ Can A Paysite Pluggin NOT Be A Simple Pluggin? Downloadable MPEG, WMV and DiVX -- UPDATED DAILY! www.itsyourporn.com

08-19-2003, 07:12 PM	#4
j3ff Confirmed User Join Date: Jun 2003 Location: Quebec city Posts: 690	thats good if you dont have it, it means you're not infected, it means you didnt run any attachments, good boy. __________________ Can A Paysite Pluggin NOT Be A Simple Pluggin? Downloadable MPEG, WMV and DiVX -- UPDATED DAILY! www.itsyourporn.com

08-19-2003, 07:08 PM	#3
Theo HAL 9000 Industry Role: Join Date: May 2001 Posts: 34,515	W32.Sobig.F@mm has not been found on your computer of course emails still coming every few sec!

08-19-2003, 07:16 PM	#5
Theo HAL 9000 Industry Role: Join Date: May 2001 Posts: 34,515	i never run them, but still pretty often due to some missing w2k update i manage to get infected....and all this because i insist to use outlook

08-19-2003, 07:40 PM	#6
Nbritte Confirmed User Join Date: Sep 2001 Location: Kentucky USA Posts: 689	This one must have gotten out quick I have gotten over 1500 emails with it today so far but nortons did an auto update before they started showing up and has been delete all the viruses Nbritt