Win32:Sober-N .......... I'm Getting Bombarded !!!

Tojo_Ralph

As of yesterday, I started to get bombarded with this damn virus. I use OE6, and Avast picks it up over and over.

I seem to get it twice in the form of zip files from each address, (16 times today) and it's basically a pain in the rrrse. As far as I know, my system is clean, no reason to believe not. I've run scans etc including house micro etc, so assume I am just suffering because of being in someone elses address book?

For now I'm simply going to block all attachments, but, any ideas? can I block only zip files?

Ta

Browntoa

if you have a smallish address book on OE then it might be someone you know and a quick email to all stating your problem might stop it in its tracks if they all instaall/run virus software or point them to this removal tool

http://securityresponse.symantec.com/avcenter/venc/data/w32.sober.removal.tool.html

T4i

Cant you get OEXP or OE2000?

http://www.majorgeeks.com/download4173.html

T4i

http://www.commodore.ca/windows/outlook_express_virus_block.htm

Look for the Using the Internet Explorer Unsafe File List to Filter E-mail Attachments bit.

danmanchester

Grrr I have received the same thing today! Received an email to [email="user@dsl.pipex.com"]user@dsl.pipex.com[/email] it actually said "user" not any of my real named email aliases so am a bit perturbed as to how Pipex allowed it to be sent on to me! The email subject was something about login/email errors.Anyway, it looked suspicious and I deleted it.Then I ran a system scan and my Panda antivirus picked it up embedded somewhere in my local settings folder!!! I think the fact that it is zipped and not a straightforward attachment it must be getting into some peoples' systems. My AV report names it as W32/Sober.V.worm - error-mail_info.zip[Winzipped-Text_Data.txt .pif]
This must be a clever !!!!!! because it got into my system despite my deleting it and I didn't even read or open it! Only the subject line in the email.

Tojo_Ralph

T4i wrote:

http://www.commodore.ca/windows/outlook_express_virus_block.htm

Look for the Using the Internet Explorer Unsafe File List to Filter E-mail Attachments bit.

OK.... zip files were already checked as "Confirm open after download"

Tojo_Ralph

T4i wrote:

Cant you get OEXP or OE2000?

http://www.majorgeeks.com/download4173.html

I have XP.... In fact I have XP Pro so I have Microsoft Outlook too.

Is one better/safer than the other?

Note... Whilst I have the email screwed down in security settings, I cannot figure out how to simply block/delete off server all attacments?

Tojo_Ralph

Browntoa wrote:

if you have a smallish address book on OE then it might be someone you know and a quick email to all stating your problem might stop it in its tracks if they all instaall/run virus software or point them to this removal tool

http://securityresponse.symantec.com/avcenter/venc/data/w32.sober.removal.tool.html

I did consider this, but thought I'd hold off for fear of ending up in never ending dialogue with folk I have sold to on EBay.

It's a new laptop, and I realised too late that all addresses were automatically being dumped in my address book.. gggrrr.

Browntoa

got you, same boat as me then...I have a web site and at some points when a new virus comes out i get up to 50 an hour at some points, it normally dies out after a week

I'm getting quite a few at the moment so maybe it's doing the rounds

Debt_Free_Chick

Tojo_Ralph wrote:

I did consider this, but thought I'd hold off for fear of ending up in never ending dialogue with folk I have sold to on EBay.

It's a new laptop, and I realised too late that all addresses were automatically being dumped in my address book.. gggrrr.

There's no point in contacting anyone in your address book as the "from" address is usually spoofed anyway. The virus is coming from someone who has YOU in THEIR address book - not necessarily from someone who is in your address book. Geddit?

Tojo_Ralph

Debt_Free_Chick wrote:

There's no point in contacting anyone in your address book as the "from" address is usually spoofed anyway. The virus is coming from someone who has YOU in THEIR address book - not necessarily from someone who is in your address book. Geddit?

Tojo_Ralph wrote:

So assume I am just suffering because of being in someone elses address book?

Yes, however, As my address book contains all the folk I know, and unfortunatly all those that I have recently sold items to on EBay, it's a fair bet that if I am in THEIR address book, then they are goin to be in MY address book.