View Full Version : Alert! W32.Sobig.F@mm Category 3 (Moderate)

08-20-03, 09:44 AM
What is W32.Sobig.F@mm and how does it affect me?
W32.Sobig.F@mm is a mass-mailing, network-aware worm that sends itself to all the email addresses that it finds in the files with the following extensions:


The worm utilizes it's own SMTP engine to propagate and will attempt to create a copy of itself on accessible network shares.

NOTE: The worm deactivates on September 10, 2003. The last day on which the worm will spread is September 9, 2003.

To read more about the W32.Sobig.F@mm, please visit

What action can I take from here?
Symantec Security Response posted virus definitions to protect against this threat on August 19, 2003 (via LiveUpdate). All users of Norton AntiVirus who do not have up-to-date virus protection should immediately run LiveUpdate for protection from W32.Sobig.F@mm.

Virus definitions are available via the LiveUpdate feature in the Norton AntiVirus product or the Symantec Security Response Web site.

Symantec Security Response encourages all Norton AntiVirus users to regularly download virus definitions in order to protect against future threats.