Published August 22nd, 2003 by Jim O'Halloran

More Sobig.f

As I reported previously we’re still seeing a lot of the Sobig.f worm. The final count for Wednesday as 82 instances with another 54 yesterday. It appears that the peak has passed as more virus scanners are updaed, but this one seems to have spread across the net much faster than previous variants. I don’t have hard numbers, but we only have 30 copies of the B variant attempt to pass throuhg our servers on its first day.

Also, we’ve had a nuch higher instance of other viruses pass through our systems in he last couple of days. In the last 2 days we’ve seen…

W32/Hybris.gen@MM: 3 Times
W32/Bugbear.b.dam: 3 Times
W32/Mimail@MM: 2 Times
W32/Bugbear.b@MM: 1 Time
W32/Klez.h@MM: 1 Time

Most of these are older viruses, which had just about died out from our point of view. I wonder if its possible that Sobig.f is dropping other viruses as well as spreading?

Update: The Register now confirms that Sobig.F is the fastest spreading email virus ever.


0 Responses to “More Sobig.f”

Feed for this Entry
  1. No Comments

Leave a Reply

XHTML: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <code> <em> <i> <strike> <strong>