Virus variations

[mad1]

Received this message from networking,
"There is a new variant out there. The very latest Norton signatures
(dated 8/19/2003 rev 3) catch it. The IMAP and POP servers are now
catching it but several hundred of them got through before the updated
signatures were released.

Attachment names may include: your_document.pif, details.pif,
your_details.pif, thank_you.pif, movie0045.pif, document_Fall.pif,
application.pif, document_9446.pif

Subjects can be "Thank You!", "Wicked Screensaver", "Details", "My
Details", "Re: Wicked Screensaver" and more.

Size seems to vary from 74Kb to 100Kb. The mail may be from addresses
that you recognize."

[puk]

Yep! is W32/Sobig-F worm.

"The author of the Sobig worms has pulled this particular confidence trick several times before," said Graham Cluley, senior technology consultant for Sophos Anti-Virus. "Many users know to be cautious about running unsolicited EXE files, but they should be equally wary about running PIF files or screensavers. All computer users should exercise caution when deciding what is safe to run on their computers."

...............from Sophos website.