Article of the Week- between moms....
to view the Article of the Week Archives!
ARTICLE OF THE WEEK:
How to get rid of new Sobig.F virus?
As you know, this time the virus under
the name Sobig.F has
wreaked quite havoc! No doubt, many of us have suffered from
this recent virus outbreak.
According to an online poll conducted by CNN: 32% of
were infected with this malicious virus. At the pick, each
every 17 emails contained sobig.F! Internet service provider
AOL says it scanned 40.5 million emails and found the virus
more than half of them. Sobig accounted for 98 percent of
viruses found in these emails.
What is Sobig.F virus?
This is a worm type of virus. Which means it is an
program that installs enhancement to your Windows operating
The ?F? implies that it is the sixth of the family of Sobig
The first one was launched in the beginning of this year.
attack was started on August 19.
According to some experts, Sobig.F was
first posted to a porn
Usenet group and spread from there. It is timed to
itself on September 10. The pre-built deactivation mechanism
itself is a worrisome factor. Most experts think this means
are more to come!
How it works?
Sobig.F comes along with an email with subject headers like
details, Thank you!, Re: Thank you!, Re: Details, Re: Re: My
Re: Approved, Re: Your application, Re: Wicked screensaver
Re: That movie. The body of the message is quite short and
contains either "See the attached file for details" or
the attached file for details."
Once the file is opened, Sobig.F resends itself using a
mailing program to e-mail addresses from the infected
As a sender is address it shows one of the e-mails randomly
selected from the computer's address book.
The worm was also supposed to attempt to retrieve an URL
predetermined list of 20 master servers on a certain date
The content of that URL was to be downloaded and executed on
the infected machines. Luckily those servers were identified
away and shut down.
How to protect yourself against it?
If your computer is infected or you have doubts, first thing
you should do is: to check and clean up your computer from
this virus. Although, it is set to deactivate on September
which means it will no longer multiply itself, however, left
untouched, it might attempt to update itself, once the newer
version of the virus comes out.
1. If you do not have latest version of anti-viruses
go to the Symantec's following page:
2. Down load the Sobig.F removal tool
for completely free of charge.
3. Install and run it by strictly following the steps
on the page.
Download the latest security patches for your version of
and install them.
If you are using Microsoft Outlook,
follow the steps below to stop
them appearing in your inbox:
- Open Outlook
- Click on "Tools" from main menu
- Choose Rules Wizard from the drop down menu
- On the page "Apply changes to this folder": Click on "New"
- Select "Start creating a rule from Templates"
- Choose "Move messages based on content"
- Click on "specific words" link from the box at the bottom
- A small window will appear, add each and every phrase
from the list below:
Re: Thank you!
Re: Re: My details
Re: Your application
Re: Wicked screensaver
Re: That movie
- Once finished click on "OK" to close
- Click on the link "specified" at the same box
- Open a new folder by clicking on the "New" button under
name "Virus Spam"
- Click on "OK"
- Click on "Finish"
- From now on all emails with the above mentioned phrases
attachments will be moved to the "Virus Spam" folder.
- All you have to do is delete the emails, which will appear
A few more cautions:
Don't open any executable attachment
in an email, unless you are
hundred percent sure that this is a legitimate file that you
Install an anti-virus program and update it on time, at the
this might be the best possible solution to protect
these ugly online creatures!
About the author
Nowshade Kabir is the founder, primary developer and present
He has Ph. D. degree in
Information Technology. Dr. Kabir has over 12 years of
in International Trade and has worked as an advisor to
government projects. You can contact him at
If you have an article you would like to share please submit it to