Sobig virus version F

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - removing cookies could someone please tell me how to remove cookies from my computer Tag: Sobig virus version F Tag: 30267
  - 2
    - removing cookies could someone please tell me how to remove cookies from my computer Tag: Sobig virus version F Tag: 30266
  - 3
    - Net work Problem I have a net work through rotor Internet runs All hard drives set on full sharing / use same work group yet i can not see other pc'c they can not see me. the net work was running before we up dated and ran fixes Any idea's on how to get my connections back ? Tag: Sobig virus version F Tag: 30264
  - 4
    - SP4 Setup error When I try to download and install SP4 on Win2000 SP3, the Express installation inspects the configuration and downloads the neccessary fixes but before it installs, I get a SP4 Setup Error "Control ID not found" and an "Installation was not completed' messages. Tag: Sobig virus version F Tag: 30255
  - 5
    - New Virus (Not) from Microsoft From: security@microsoft.com Subject: Use this patch immediately ! Dear friend , use this Internet Explorer patch now! There are dangerous virus in the Internet now! More than 500.000 already infected! Attachment: ATT00004txt (59b) Cannot be deleted by Norton Corporate Version, but is quaranted as a potentially unsafe patch.exe. Scan type: Realtime Protection Scan Event: Virus Found! Virus name: W32.Dumaru@mm File: patch.exe Location: Mail System Computer: RUSSDESKTOP User: Charles Gibson Action taken: Clean failed : Quarantine succeeded : Date found: Mon Aug 25 10:06:40 2003 Tag: Sobig virus version F Tag: 30252
  - 6
    - Service Pack 4 I'm attempting to install service pack 4 for windows 2000 on my home pc. When I try to kick it off (after downloading it with realdownload)I get the following error message: "SP4EXPRESS_EN.exe is linked to missing export NTDLL.DLL:STRSTR." After clicking OK, I then get a message of "A device attached to the syste is not functioning." My printer is functioning fine, which is really the only external hardware I have connected. I have a PDA synchronization cradle attached, and it too is functioning fine. I then downloaded the full version and I get the same error message for it. Any thoughts? Tag: Sobig virus version F Tag: 30232
  - 7
    - Internet optimizer.com It seems that every time I go to favourites and click on a link that I get a webpage a called Internet optimizer. The only way I can get into the link is to type the web address. This has only happened in the last few days. I have put a block and I still get it. I am concern Tag: Sobig virus version F Tag: 30231
  - 8
    - Microsoft patch I am receiving emails titled "Microsoft - use this patch immediatley. Dear friend use, this Internet Explorer patch now! There are dangerous virus in the Internet now! More than 500,000 already intefcted!" With an attachment. Is it from Microsoft and is it safe to open and use? Please reply. Thank you Tag: Sobig virus version F Tag: 30226
  - 9
    - internet terminately unexpectedly when connected to the internet for a period of time i get the following warning message and my pc will close down. "The system is shutting down. Please save ..... The shutdown was initiated by NT AUTHORITY/SYSTEM. Windows will restart because the Remote Procedure Call (RPC) service terminated unexpectedly." Can anone help. My os in Wnidows XSP and i connect to h internet using BTinternet DSL connection. Thanks Tag: Sobig virus version F Tag: 30225
  - 10
    - Hacker "Ping Attack" Recently my firewall has stopped multiple attacks called "Ping Attack" from hackers, but I suppose on occasion it does go through because my computer starts to lagg up really bad n freezes on multiple occasions. I have cable internet and am running window xp professional. Is there any way I can stop the attacks? Tag: Sobig virus version F Tag: 30220
  - 11
    - unusual activity on the DSL Today I noticed the DSL lights flashing when nobody was logged on. so I logged on and did a netstat I got the following info 206.112.112.69 and 206.112.112.64 the top one points to Akamaitechnologies.com I went to their web site and don't see anything that relates to any software I have on my computer. Why would they be pinging my pc? Tag: Sobig virus version F Tag: 30219
  - 12
    - email ive recieved many email today and i was wondering if its a virus or a real microsoft message. the sender it just says ..........microsoft the message reads: use this patch immediatley! my guestion is this from you folks at mircrosoft or is it a hoax or a virus...ive deleted all but one...as i wanted to make sure that its for real before i download anything. Thanks so much for your consideration in answering this for me.....Sincerely, Margaret Tag: Sobig virus version F Tag: 30215
  - 13
    - ISA Server: Spoof attack from 127.0.0.1? Recently I received lots of warnings from ISA Server saying there is spoof attack from 127.0.0.1. What does that mean? Tag: Sobig virus version F Tag: 30210
  - 14
    - ActiveX Controls I get the following message from Microsoft Internet Explorer: "Your current security settings prohibit running ActiveX controls on this page. As a result, the page may not display correctly." I have enabled all 5 ActiveX controls, done many things suggested by AOL & Gateway. Nothing has worked. I am running Windows 98 with Road Runner and AOL. My AOL Calendar does not display and I get the same message there. Any ideas? Thanks Tag: Sobig virus version F Tag: 30208
  - 15
    - updating??? Somebody PLEASE help me. The microsoft site tells me that my Windows 98 is no longer supported and I should update but I have no idea how to do that so I can get rid of whatever is causing me to get kicked off all the time. Can anybody help? Tag: Sobig virus version F Tag: 30199
  - 16
    - Hot fixes and n-case I have downloaded the hot fixes from windows. They are taking up a lot of space on my computer. Do I remove them or do they need to stay to continue to work? I am also getting this message "The system has detected that a third party application has removed n-case" They are asking to reinstall. What is n-case and what do I do? Tag: Sobig virus version F Tag: 30196
  - 17
    - XP Firewall and Yahoo Chat When trying to use Yahoo Messenger Chat to view a webcam or to use voice..... it tells me that it can't do that because I am behind a firewall... however I have it disabled.... where do I turn next? Thanks Tag: Sobig virus version F Tag: 30184
  - 18
    - Returning gobs of e-mails hello, Everytime I open MS outlook express I have dozens of e- mails that I never sent returned to my box. The failure notice claims I sent them, but I di not, the sent items box does not show them and 99% if them the addresses I have never even seen before. Any ideas???? Thanks Tag: Sobig virus version F Tag: 30182
  - 19
    - Frequency Waves Is it true that placing a portable phone too close could damage a computer? Tag: Sobig virus version F Tag: 30177
  - 20
    - ActiveX controls When surfing the net, I get pop up windows asking if I want to allow ActiveX content and warnings the the page is trying to access an ActiveX script. Where do I go to stop this from happening? Thx Tag: Sobig virus version F Tag: 30176
  - 21
    - Dssagent.exe messing with my shutdown?? Iam using windows ME and noticed that my shutdown takes forever. But when I <CNTRL ALT Delete> and END task for HOTKEYS,and MACROS... then RETRY shutdown... which works. I noticed that DSSAGENT.exe is running...used MCAFEE to delete it. But like a bimble it came back? What is DSSAgent?? Many thanks!! Regards Joe D. Tag: Sobig virus version F Tag: 30168
  - 22
    - Q823718 MDAC Patch Has anyone deployed this patch and encountered problems? I pushed it out last night and now I cannot log into half my systems! you can ping, map drives, even acces resources like webservers, but no local log in. I have 600 plus systems. HELP! Tag: Sobig virus version F Tag: 30167
  - 23
    - Upgrade MDAC to version 2.8 vs MS03-033 Patch Greetings, I manage a domain with Windows 2000 Domain Controllers, Exchange 2000 running on Windows 2000, 2000 Professional on all of the desktops, and a handful of NT 4.0 servers either running SQL Server 7.0 or Oracle applications. I'm not sure if this is significant, but I'll also note that we have a few member servers and clients running Microsoft Great Plains eEnterprise version 6.0 (soon to be upgraded to version 7.5). At that time we will also be updating our SQL servers to SQL Server 2000. I was set to apply the MS03-33 patch to all of the Windows 2000 Server and Pro systems, but we have a staff member proposing the alternative of upgrading MDAC to version 2.8, in lieu of patching. The logic here is that version 2.8 is not at risk from the exploits addressesed by the patch. My preference is to apply the patch and not to update. I'm looking for other opinions here. Is the update to MDAC 2.8 a suitable alternative? The NT 4.0 servers are running MDAC version 2.1, which is not addresses by the patch. Would it be better to update them to version 2.5 and then patch or go straight to version 2.8? Thanks in advance, Alan Tag: Sobig virus version F Tag: 30165
  - 24
    - Did Sobig spread by clicking on a link? There's this story going around: "Sobig.F was released last Monday on a sex-oriented Internet discussion group, infecting computers when users clicked on what appeared to be nude pictures, experts from several security companies who had seen the site said." Other versions referring to it as a link instead of a nude picture. So this begs the questions: Did the Sobig initial spread by just clciking on a link? So am I at risk anytime I simply click on a link? TIA Tag: Sobig virus version F Tag: 30163
  - 25
    - blocking websites is there any way of blocking websites adding themselves to my favourites list and sending me web pages since website like casino websites continuosly add themselves to my favourites, adding desktop shortcuts and also web pages keep ramdomly appearing on my screen whilst trying to surf the web in peace thanks Tom Tag: Sobig virus version F Tag: 30152
- Next
  - 1
    - Windows application event message queue and callback security How can I stop or detect when another application is monitoring or is modifying my message queue or subclassing my app controls? Ie., somehow detect or prevent when a program like spy++ is watching my messages or an injector is pumping in messages or somehow changed the callbacks. Tag: Sobig virus version F Tag: 30147
  - 2
    - Patch vulerability in NT Is there a patch whereby you can patch the new virus vulerabiliity in NT workstatation 4.0 without needing service pack 6? Tag: Sobig virus version F Tag: 30141
  - 3
    - cipher strength 128 bit hi iam using ie 5.0 with cipher strength as 56 bit. i need to download cipher strength 128 bit. do i need to download ie 5.x or greater? is there any way to update cipher strength 128 bit with downloading the higher version of ie? pls help thanx Tag: Sobig virus version F Tag: 30140
  - 4
    - Administrator Dear Expert, I accidentely made myself a limited user and deleted "Computer Administrator". How can I recover the "Administrator", I am the Only user Of this Computer? Werner Tag: Sobig virus version F Tag: 30135
  - 5
    - popups i keep getting pop ups from "messenger service" telling me to contact www.byebyeads.com. i am running norton internet security. virusscan finds nothing. please help. ben Tag: Sobig virus version F Tag: 30130
  - 6
    - e-mail request ostensibly from Microsoft to download a patch I've gotten two messages ostensibly from microsoft that my computer warns me lack an Autheticode sinature. The message is from"microsoft"<security@microsoft.com> the return path is<admin.duma.gov.ru> Is this a legitamate message from Microsoft? Thanks Tag: Sobig virus version F Tag: 30122
  - 7
    - latest critical update help pls i am unable to download the latest critical updates from the microsoft update website 822925 and 823718 can anyone shed some light on this pls. im running windows xp home edition all other updates are to date Tag: Sobig virus version F Tag: 30118
  - 8
    - cookies Does anyone know if I do not visit a website but a "pop- up" ad is sent, will this still create cookies? From what I gather, the cookies are only created when you visit a certain web page or site. Is this correct? (suspect someone of visiting porn sites - according to the files in cookies!) Tag: Sobig virus version F Tag: 30097
  - 9
    - E-mail Alerts from Win2k Server Hi, I was just wondering if anyone out there has any preferences to system security applications for windows servers? I am looking for an application that will be able to e-mail Sys Admins when something has gone wrong, and also possibly the system logs on a weekly basis? thanks, - Lenny Tag: Sobig virus version F Tag: 30094
  - 10
    - 98SE firewall with dial-ip Any sugestions for a downloadable firewall (I have AVG for virus protection) with 98 Second Edition operating system and dial-up internet connection? Thanks for any help you can give, guys, Kent Tag: Sobig virus version F Tag: 30092
  - 11
    - The sobig worm and ME I have read the articles and I hear the claims that it does NOT affect windows ME.... this isnt true. My PC is suffering fromt he same effects that the others are, that possess this worm. I need some help. Any advice as to where I can find a patch to delete this nasty bug? Is it going to come down to me reformatting this PC? Are there any solutions for ME, or is it not a recognized problem yet? Please help if you can. Tag: Sobig virus version F Tag: 30089
  - 12
    - Windows 98 SE How can I lock windows? I do not have dial up, and I would like to know if there is a way to only open windows with a password. Thank You, Emma Tag: Sobig virus version F Tag: 30086
  - 13
    - list.....these are blocking good 4.40.20.65 4.72.69.69 12.213.175.149 24.169.249.251 24.174.251.233 61.25.177.140 61.185.205.121 62.234.18.155 62.254.76.81 62.255.41.20 64.119.68.121 65.26.220.218 65.27.224.181 65.94.115.215 66.131.219.38 66.177.43.246 67.73.34.91 68.120.91.160 69.144.163.230 80.221.9.19 81.86.222.112 81.107.100.212 82.37.34.15 82.145.229.105 134.217.237.30 142.173.58.75 172.200.126.212 198.142.210.122 202.156.166.228 203.12.160.33 212.47.242.72 218.145.25.112 218.253.64.154 Tag: Sobig virus version F Tag: 30083
  - 14
    - Pop up Messenger hi, i recently restored my windows and now when i connect to internet after every 2,3 minutes i get a secuirty popup messege from windows messenger that my ip os being broadcasted, can any one help me with this Thanks, Masood Tag: Sobig virus version F Tag: 30081
  - 15
    - Help please XP + Norton Internet Security Ive Just updated my antivirus using Norton Internet Security Ive hap windows XP for over a year with no problems untill now. I cannot read my floppy disk drive or cd drive. Any Ideas please. Ian Tag: Sobig virus version F Tag: 30080
  - 16
    - Windows Update CD Recently I had to rapidly develop and package a CD for home users to install Windows security related software updates. We have been developing CD's in the past for technical users which include patches and minimal documentation. I know where to download required service packs and hotfixes that can be placed on a CD. Unfortuntely, home users require more detailed instructions that can be easily followed. Microsofts Windows Update website is ideal for users with high speed Internet, however this is not practical for people with dialup or no Internet access. Any ideas on how a standalone Windows Update CD could be developed which is similar in idea to Microsoft's Windows Update website (http://windowsupdate.microsoft.com)? That is, a CD that can be delivered to users that would scan the computer for missing security related software updates and allow a one button install of all thats missing? There should be the assumption that the computer will not have Internet access. I expect that this could use hfnetchk/mbsa with a mssecure.xml file on the CD to detect whats missing. Any ideas how this can be integrated onto a standalone CD with a user friendly interface in a way that it could be used a template and updated with new packages as required? Brian brian_anon@hotmail.com Tag: Sobig virus version F Tag: 30074
  - 17
    - help update security problem I have Windows XP Professional and recently took the computer in because of the worm where it constantly rebooted within a minute. I realized then that the updates from microsoft that I had downloaded all failed prior to the worm and now, afterward. What goes? Pat Tag: Sobig virus version F Tag: 30063
  - 18
    - XP Firewall I'm wondering if the firewall that is included with XP Home Edition is a good one or should I purchase Norton or McAffee. Tag: Sobig virus version F Tag: 30061
  - 19
    - IP address/Media disconnected I wanted to run a security check. It told me that my IP address was different than what I said. When I tried to check my IP by (running winipcfg), under IP address it has "Media Disconnected". What's going on? What should I do? Tag: Sobig virus version F Tag: 30056
  - 20
    - Changing Passwords I am new to WindowsXP. How do I change the password for the Internet access. Could someone give me a step by step guideline please? Tag: Sobig virus version F Tag: 30049
  - 21
    - IM spam Hi Is there a patch to block IM spam? Tag: Sobig virus version F Tag: 30037
  - 22
    - folder security rights we are just moving to a domain network, what is the best policy for assigning security rights to files and folders, should I delete the everyone group and give access to "domain users" or a custom group called "staff" etc, also we have 4 users that should have admin rights, should we use "administrator" as the main user or add each user to "Domain Admins" group and get them to log into servers as themselves so the changes can be monitored-but wont this create multiple profiles on the servers?-whats best? we run Windows 2000 servers. Thanks for your help Tag: Sobig virus version F Tag: 30029
  - 23
    - HELP wich one is better (stable , & grafical interface)??? Redhat 8 or 9???? reply at drweed551@hotmail.com Tag: Sobig virus version F Tag: 30019
  - 24
    - NEED HELP IMMEDIATELY PLEASE I need to know how to clean sweep my hard drive. Is there a download somewhere I cam get for free or purchase on line and download it? I need to do this ASAP Tag: Sobig virus version F Tag: 30018
  - 25
    - How to proof high encryption is being used? Microsoft provides high encryption with at least 128 bits symmetric key after installing the high encryption pack. However, is the high encryption option is used by default after installing the pack, or should I need to do some setting to enable it? And how can I prove enough bit key is being used? Many thx. Tag: Sobig virus version F Tag: 30007

I am trying to find out if I have the sobig virus on my
computer. While going through the remove Blaster virus
routine, I found this file in the Task Manager:
E_SOBIC1.EXE in the processes panel. Is this the
execution file for the Sobig virus?

Top

Re: Sobig virus version F by John

John
Mon Aug 25 17:12:30 CDT 2003

"dennis" <DDMOODY@COMCAST.NET> wrote in message
news:044001c36b32$6b6824f0$a101280a@phx.gbl...
> I am trying to find out if I have the sobig virus on my
> computer. While going through the remove Blaster virus
> routine, I found this file in the Task Manager:
> E_SOBIC1.EXE in the processes panel. Is this the
> execution file for the Sobig virus?

Why not just go to:

http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.removal.tool.html

and download the removal tool and run it. If you have SOBIG.F on your system
it will be removed. If you don't have it then the program will tell you so.
--
John McGaw
[Knoxville, TN, USA]

Return address will not work. Please
reply in group or through my website:
http://johnmcgaw.com

Top