Sobig Worm

| About Sobig |  Running a Scan with Norton|Resources |
 

About Sobig

Sobig (W32.Sobig.F@mm) is a mass-mailing worm that sends itself to all the email addresses it finds in the files on an infected machine (from Symantec).  Computers on the TTU campus receiving their email from the campus email server (@tntech.edu) and reading their campus email using programs such as Outlook Express, Outlook, Webmail, VMS mail, Pine, etc. ARE PROTECTED from this Worm. 

However, if you read email from an off campus provider and you do not have an antivirus program you may become infected.

The Sobig worm randomly takes addresses found on an infected machine and inserts them into both the To and From fields of the email messages it generates.  This means that if your email address is in a file on someone else's machine that became infected you may receive:

• Undeliverable messages for email you did not send
•  Automated responses returning email to you that you did not send with a message that you have a virus. 

Just DELETE and PURGE these messages.  You do not have the virus.

If you become concerned at any time, you should run a virus scan of your machine. 
 

Running a Scan with Norton Antivirus on campus

Click on the yellow shield in the bottom right corner (system tray). Click Scan Computer in the left menu. Check the box to select C: (Local Drive) Click the Scan button at the bottom of the window.
If you find an infection, please contact MicroSupport@tntech.edu  or your college contact.

Resources

For more information on this worm, consult the Norton Antivirus Center.

If you feel you are infected at home, Symantic has a Removal Tool available.  Please read all directions carefully.