Level 3 Virus: W32.Sober.D@mm

Zardon · Mar 9, 2004, 08:54 AM

Just a little reminder about this particular virus hitting the scene of late.

W32.Sober.D@mm is a variant of W32.Sober.C@mm that spreads by sending itself as an email attachment using its own SMTP engine.

Detailed information here

BWX · Mar 9, 2004, 06:18 PM

WTF, I just got one of the only virus I have ever gotten through email in my life! Actually I didn't get it, my girlfriend did- But my Norton was up to date and nailed it--

Here's the problem, I can't see which email it came from, and since I never get viruses I cannot figure out how to see which email(s) it came from.... Anyone know how to tell in NAV 2002?

This is what it says in the logs:

"Date: 3/9/2004, Time: 12:43:06, xxxx xx xxxxx
The email attachment misc_shower.zip is infected with the W32.Netsky.C@mm virus.
The file was quarantined.

Date: 3/9/2004, Time: 12:43:06, xxxxx xx xxxxxx
The email attachment misc_shower.rtf.exe within misc_shower.zip is infected with the W32.Netsky.C@mm virus.
The file was quarantined."

---But why doesn't it say which email it came from??

PangingJr · Mar 10, 2004, 03:25 AM

ah just noticed this you've got the netsky too.
i'm not sure, try checking in the NAV's mail scan settings,
see if it has anything like 'Action when virus found',
if so, change the action from "Delete" to "Clean"
also you may want to delete the infected file in quarantine folder too.

BWX · Mar 10, 2004, 06:17 PM

Quote:

Originally posted by panging
ah just noticed this you've got the netsky too.
i'm not sure, try checking in the NAV's mail scan settings,
see if it has anything like 'Action when virus found',
if so, change the action from "Delete" to "Clean"
also you may want to delete the infected file in quarantine folder too.

Yup, I just deleted the quarantined items- last night I did a full system scan and I was clean. I guess Norton did it's job then. I guess it doens't matter who they came from, since it probablt really didn't come from them anyway...

PangingJr · Mar 10, 2004, 06:56 PM

will PM you..

FluffyChicken · Mar 12, 2004, 03:58 PM

If they're quarentined your safe

To find which email it's from just look through the emails themselves and it will say.
The attachment will say something like Norton Antivirus.....
The originator will not be who it says and you will probably need look into the header to see who it's really from

Mar 9, 2004, 08:54 AM	#1
Zardon DriverHeaven Founder Join Date: May 2002 Posts: 32,480 Rep Power: 179	Level 3 Virus: W32.Sober.D@mm Just a little reminder about this particular virus hitting the scene of late. W32.Sober.D@mm is a variant of W32.Sober.C@mm that spreads by sending itself as an email attachment using its own SMTP engine. Detailed information here

Mar 9, 2004, 06:18 PM	#2
BWX unplugged Join Date: Nov 2002 Location: USNY Posts: 19,669 Rep Power: 110 System Specs	WTF, I just got one of the only virus I have ever gotten through email in my life! Actually I didn't get it, my girlfriend did- But my Norton was up to date and nailed it-- Here's the problem, I can't see which email it came from, and since I never get viruses I cannot figure out how to see which email(s) it came from.... Anyone know how to tell in NAV 2002? This is what it says in the logs: "Date: 3/9/2004, Time: 12:43:06, xxxx xx xxxxx The email attachment misc_shower.zip is infected with the W32.Netsky.C@mm virus. The file was quarantined. Date: 3/9/2004, Time: 12:43:06, xxxxx xx xxxxxx The email attachment misc_shower.rtf.exe within misc_shower.zip is infected with the W32.Netsky.C@mm virus. The file was quarantined." ---But why doesn't it say which email it came from?? __________________

Mar 12, 2004, 03:58 PM	#6
FluffyChicken DriverHeaven Addict Join Date: Nov 2002 Location: England Posts: 320 Rep Power: 0	If they're quarentined your safe To find which email it's from just look through the emails themselves and it will say. The attachment will say something like Norton Antivirus..... The originator will not be who it says and you will probably need look into the header to see who it's really from __________________ [COLOR=#455b64]Team mauisun.org [/COLOR]

Mar 10, 2004, 03:25 AM	#3
PangingJr Member Join Date: Mar 2003 Posts: 5,989 Rep Power: 71	ah just noticed this you've got the netsky too. i'm not sure, try checking in the NAV's mail scan settings, see if it has anything like 'Action when virus found', if so, change the action from "Delete" to "Clean" also you may want to delete the infected file in quarantine folder too.

Mar 10, 2004, 06:56 PM	#5
PangingJr Member Join Date: Mar 2003 Posts: 5,989 Rep Power: 71	will PM you..