Email worm hitting HARD! - GoFuckYourself.com

Brujah · 05-04-2005, 06:53 PM

W32/Sober.O is an email worm. This worm is a variant of W32/Sober. The worm will infect Windows systems and spreads through email.

The infected email carries a spoofed 'From' address picked up randomly from the infected system.
http://www.pspl.com/virus_info/worms/sobero.htm

I'm getting this on all of my email accounts, and a lot of bounces making it look like I'm the one that sent them. You may already be seeing the same.

Darby · 05-04-2005, 07:05 PM

I just got a shitload in the last hour

Spunky · 05-04-2005, 07:08 PM

I must have had 100 today..freakin annoying

Sosa · 05-04-2005, 07:46 PM

glad my isp blocks that shit before it even hits my mailbox

ProjectNaked · 05-04-2005, 07:57 PM

I was getting them last week, got so bad I had no choice but to change my email accts -

austinth · 05-04-2005, 08:00 PM

yep i saw those starting yesterday in the morning some time

Nismo · 05-04-2005, 08:04 PM

so that's what that was. i've been getting a ton of them.

StuBradley · 05-04-2005, 08:06 PM

I hadn't noticed because I use Spam Arrest. Just checked my unverified emails on their site....holly shit that's alot of emails!

Spunky · 05-04-2005, 08:07 PM

I found that a lot of email was sent from the Phillipines...
so I denied incomming emails from this country and I enabled filtering incomming messages for attachments like: bat, pid, exe, zip, rar. Haven't received one today

Vox · 05-04-2005, 08:19 PM

Why is it that some new virus comes out when my anti virus subscription just expires.

Luc · 05-04-2005, 08:45 PM

bruj, how you gettin hit if you using spamarrest.

Brujah · 05-04-2005, 09:54 PM

Quote:

Originally Posted by Luc

bruj, how you gettin hit if you using spamarrest.

I'm not getting hit with the worm. I'm getting replies from people who think I send them the email because of the From address spoofing it uses. I investigated it a little bit and saw the emails in my spamarrest Unverified.. as they get bounced back.

05-04-2005, 09:56 PM

So far so good. I hate these fucking viruses though.

NaughtyRob · 05-04-2005, 09:56 PM

I am not getting it at all.

VeriSexy · 05-04-2005, 09:59 PM

Quote:

Originally Posted by Sosa

glad my isp blocks that shit before it even hits my mailbox

That is what every ISP should be doing..........

BigBen · 05-04-2005, 11:52 PM

Check out ClamAV for your mailserver

http://www.clamav.net/

WebGemsHosting · 05-05-2005, 12:48 AM

yeah, been getting them all day in my local ISP mailbox.....

dalila · 05-05-2005, 01:09 AM

Read about it yesterday here http://www.pimpcafe.com/article2/art...p?article=3331
but didn't get any infected email yet

dalila · 05-05-2005, 01:11 AM

hmm sorry the article seems to be removed already

loverboy · 05-05-2005, 08:43 AM

good thing i get hourly auto updates from Trend Micro

MickeyG · 05-05-2005, 08:44 AM

I noticed those the other day, I did a manual update with norton and now it catches them. I wish this thing updated more frequently.

05-04-2005, 06:53 PM	#1
Brujah Beer Money Baron Industry Role: Join Date: Jan 2001 Location: brujah / gmail Posts: 22,157	Email worm hitting HARD! W32/Sober.O is an email worm. This worm is a variant of W32/Sober. The worm will infect Windows systems and spreads through email. The infected email carries a spoofed 'From' address picked up randomly from the infected system. http://www.pspl.com/virus_info/worms/sobero.htm I'm getting this on all of my email accounts, and a lot of bounces making it look like I'm the one that sent them. You may already be seeing the same. __________________ Free Premium Domain Lists and Tools at Clickmojo.com For Sale: Obscenity.com

05-04-2005, 07:05 PM	#2
Darby Confirmed User Industry Role: Join Date: Oct 2003 Location: Las Vegas Posts: 358	I just got a shitload in the last hour __________________ custom cam payouts - interested in your cam traffic for sale icq 172048099 - darby at 739cams.com

05-04-2005, 07:08 PM	#3
Spunky I need a beer Industry Role: Join Date: Jun 2002 Location: ♠ Toiletville ♠ Posts: 133,940	I must have had 100 today..freakin annoying __________________ *YOUR INFORMATION HERE*

05-04-2005, 08:00 PM	#6
austinth Confirmed User Join Date: Jul 2002 Location: Fantasy Island Posts: 1,770	yep i saw those starting yesterday in the morning some time __________________ Get A $25 Circuit City GIFT Card - *FREE*!

05-04-2005, 08:04 PM	#7
Nismo Confirmed User Join Date: May 2002 Location: FLORIDA Posts: 4,977	so that's what that was. i've been getting a ton of them. __________________ i buy massive xxx dating traffic.

05-04-2005, 07:46 PM	#4
Sosa In Tushy Land Join Date: Oct 2002 Location: Nebraska Posts: 40,149	glad my isp blocks that shit before it even hits my mailbox

05-04-2005, 07:57 PM	#5
ProjectNaked Confirmed User Join Date: Jul 2004 Location: Detroit Areola Posts: 4,309	I was getting them last week, got so bad I had no choice but to change my email accts -

05-04-2005, 08:06 PM	#8
StuBradley Confirmed User Join Date: Jul 2002 Location: Las Vegas Posts: 2,625	I hadn't noticed because I use Spam Arrest. Just checked my unverified emails on their site....holly shit that's alot of emails! __________________ 51-566-514

05-04-2005, 08:07 PM	#9
Spunky I need a beer Industry Role: Join Date: Jun 2002 Location: ♠ Toiletville ♠ Posts: 133,940	I found that a lot of email was sent from the Phillipines... so I denied incomming emails from this country and I enabled filtering incomming messages for attachments like: bat, pid, exe, zip, rar. Haven't received one today __________________ *YOUR INFORMATION HERE* Last edited by Spunky; 05-04-2005 at 08:09 PM..

05-04-2005, 08:19 PM	#10
Vox Confirmed User Industry Role: Join Date: Mar 2002 Location: Montreal Posts: 2,710	Why is it that some new virus comes out when my anti virus subscription just expires. __________________ Social profile assassination for hire

05-04-2005, 08:45 PM	#11
Luc Confirmed User Join Date: Nov 2002 Location: Houston Posts: 1,130	bruj, how you gettin hit if you using spamarrest.

05-04-2005, 09:56 PM	#13
shermo Guest Posts: n/a	So far so good. I hate these fucking viruses though.

05-04-2005, 09:56 PM	#14
NaughtyRob Two fresh affiliate progs Industry Role: Join Date: Nov 2004 Location: Inside teen pussy Posts: 29,602	I am not getting it at all. __________________ [email protected] Skype: 17026955414 Vacares Web Hosting - Protect Your Ass with Included Daily Backups

05-04-2005, 11:52 PM	#16
BigBen Confirmed User Join Date: Nov 2004 Location: scv Posts: 2,299	Check out ClamAV for your mailserver http://www.clamav.net/

05-05-2005, 12:48 AM	#17
WebGemsHosting Registered User Join Date: Jan 2004 Location: South Florida Posts: 98	yeah, been getting them all day in my local ISP mailbox..... __________________ Web Gems Hosting [email protected] www.webgemshosting.com ICQ# 8447977 Quality, Performance, Value

05-05-2005, 01:09 AM	#18
dalila Confirmed User Industry Role: Join Date: Feb 2005 Location: Prague, Czech Republic Posts: 573	Read about it yesterday here http://www.pimpcafe.com/article2/art...p?article=3331 but didn't get any infected email yet

05-05-2005, 01:11 AM	#19
dalila Confirmed User Industry Role: Join Date: Feb 2005 Location: Prague, Czech Republic Posts: 573	hmm sorry the article seems to be removed already

05-05-2005, 08:43 AM	#20
loverboy When it rains, it pours Industry Role: Join Date: May 2003 Posts: 20,609	good thing i get hourly auto updates from Trend Micro

05-05-2005, 08:44 AM	#21
MickeyG Confirmed User Join Date: May 2004 Location: South Florida Posts: 4,134	I noticed those the other day, I did a manual update with norton and now it catches them. I wish this thing updated more frequently.