NAchtrag:
The W32.Sobig.A@mm worm sends itself to all the addresses it finds in the .txt, .eml, .html, .htm, .dbx, and .wab files. The email message has the following characteristics:
From:
big@boss.com
Subject: The subject will be one of these:
Re: Movies
Re: Sample
Re: Document
Re: Here is that sample
Attachment: The attachment will be one of these:
Movie_0074.mpeg.pif
Document003.pif
Untitled1.pif
Sample.pif
Before W32.Sobig.A@mm sends the messages, it sends a message to an address at pagers.icq.com.