[SIZE=2]<span style="font-family:arial">Just recieved a notice regarding the upgrade of a virus to Category 3 (moderate threat) and figured I should post the details about this virus here.

<div class=\'quotetop\'>QUOTE</div><div class=\'quotemain\'>W32.Sobig.E@mm is a mass-mailing worm that sends itself to all the email addresses that it finds in files with the following extensions:

.wab
.dbx
.htm
.html
.eml
.txt

The email attempts to trick the recipient into believing it came from Yahoo(support@yahoo.com).

The email message has the following characteristics:From: support@yahoo.com

(W32.Sobig.E@mm may also spoof the email From: field and use any available address.)

Subject: The subject line will be one of the following:

Re: Application
Re: Movie
Re: Movies
Re: Submitted
Re: ScRe:ensaver
Re: Documents
Re: Re: Application ref 003644
Re: Re: Document
Your application
Application.pif
Applications.pif
movie.pif
Screensaver.scr
submited.pif
new document.pif
Re: document.pif
004448554.pif
Referer.pif


Attachment: The attachment name will be one of the following:

your_details.zip (contains details.pif)
application.zip (contains application.pif)
document.zip (contains document.pif)
screensaver.zip (contains sky.world.scr)
movie.zip (contains Movie.pif)

NOTE: W32.Sobig.E@mm worm de-activates on July 14, 2003.[/quote]

Anyone using Norton AntiVirus that has their definitions updated to June 25 are protected against this.I advise all members to update their antivirus software of choice (and if you don't have any yet,get some-it's pretty much required software these days).[/b]</span>[/SIZE]