Hi to all,
Can anyone help me please?
As this problem is driving me mad, with the e-mail’s that i keep getting that are loaded with the Win32.Sobig:F virus.
As over the last 5 days, i have got about 500+ e-mail’s that have the Win32 Sobig F virus attached to them. (All have been deleted)
I am using Windows XP Home (up to date), with Avast Free, SpyBot, a2, Ad-Aware Free and Spyware Blaster.
I have checked my computer with Avast on 3 occasions, the same with the other stuff and nothing found.
I have used a Removal tool twice, still nothing, but still i keep getting the e-mail’s coming.
I have also checked my computer twice, with an online anti-virus scanner, again nothing
I check my e-mail’s with Mailwasher, so that they don’t get near my computer.
And still each time i check my mail, i get loads of these e-mail’s loaded with the virus.
I have also done the same with my son’s computer, as we are sharing a Broadband connection via a Router.
Does anyone have any ideas about my problem, and if i am infected?
As i have had 2 e-mail’s saying that i have sent out 2 infected messages.
A copy of what one contained is below: (which made Avast log an infected message)
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed:
jr@********.com
This message has been rejected because it has
a potentially executable attachment “your_document.pif”
This form of attachment has been used by
recent viruses or other malware.
If you meant to send this file then please
package it up as a zip file and resend it.
------ This is a copy of the message, including all the headers. ------
Return-path: <highwaman@****.co.uk>
Received: from [24.61.69.156] (helo=DELL2)
by hades.liveshere.com with esmtp (Exim 4.52)
id 1EzKOj-0005sO-TP
for jr@********.com; Wed, 18 Jan 2006 15:59:21 -0500
From: highwaman@yahoo.co.uk
To: jr@beachcoverealty.com
Subject: Re: Your application
Date: Fri, 21 Dec 2001 0:50:40 --0500
X-MailScanner: Found to be clean
Importance: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary=“_NextPart_000_018DA414”
This is a multipart message in MIME format
–_NextPart_000_018DA414
Content-Type: text/plain;
charset=“iso-8859-1”
Content-Transfer-Encoding: 7bit
See the attached file for details
–_NextPart_000_018DA414
Content-Type: application/octet-stream;
name=“your_document.pif”
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename=“your_document.pif”
Then there is load of characters that might as well be ancient Greek to me!!
I have never seen or used this e-mail address above.
And now i am even beginning to doubt the results that are before me on my own computer, after running the tests.
I have submitted a Hijack This log to another website, but the help i got did not help.
And my questions about the answer i got, have not been replied to.
This is the problem, most of the addresses i do not know, and are totally random to me.
And most of them are new one’s, although some are now getting doubled/tripled or even quadrupled up from the same address.
And it was only when one stood out that i know 3 days ago, that made me contact the person in case they were sending them.
As before that, i had deleted about 150 of these e-mail’s as a virus intrusion onto my computer.
And now that i know this person has scanned their computer, and found nothing.
It makes me think that the problem lies with me, and my computer.
But how can it?
As every test shows that the Win32.Sobig.F virus is not on my machine.
And now the addresses say i am infecting them, but they have the same virus attached to them according to Avast anti-virus.
Please help me, thanks in advance.