Results 1 to 8 of 8

Thread: how to get the sobig.f virus

  1. August 26th, 2003, 11:20 AM #1
    deadforg
    deadforg is offline
    Banned
    Join Date
    May 2003
    Posts
    13

    how to get the sobig.f virus

    please tell me how to get the sobif.f virus program.
    i want to analysising .
  2. August 26th, 2003, 12:13 PM #2
    slarty
    slarty is offline
    Senior Member
    Join Date
    Jan 2002
    Posts
    1,207
    Drop an unpatched win2k box on the net for a few hours - you're almost guaranteed to get it

    Slarty
  3. August 26th, 2003, 12:48 PM #3
    the_JinX
    the_JinX is offline
    Leftie Linux Lover the_JinX's Avatar
    Join Date
    Nov 2001
    Location
    Beverwijk Netherlands
    Posts
    2,534
    slarty that will only get you blaster.. sobig is a mail virus

    so just post your mail addy on a public site and open up your outlook (express)..
    be sure to enable the preview function.. and you'll be sure to get infected..
    ASCII stupid question, get a stupid ANSI.
    When in Russia, pet a PETSCII.
    Get your ass over to SLAYRadio the best station for C64 Remixes !
  4. August 26th, 2003, 12:53 PM #4
    Und3ertak3r
    Und3ertak3r is offline
    The Doctor Und3ertak3r's Avatar
    Join Date
    Apr 2002
    Posts
    2,744
    here kitty kitty... here kitty kitty..

    bang..


    easier captured dead.. they don't bite that way!
    "Consumer technology now exceeds the average persons ability to comprehend how to use it..give up hope of them being able to understand how it works." - Me http://www.cybercrypt.co.nr
  5. August 26th, 2003, 03:07 PM #5
    Noia
    Noia is offline
    Now, RFC Compliant! Noia's Avatar
    Join Date
    Jan 2002
    Posts
    1,210
    Oi! Don't hurt the Kitty :P
    With all the subtlety of an artillery barrage / Follow blindly, for the true path is sketchy at best. .:Bring OS X to x86!:.
    Og ingen kan minnast dei linne drag i dronningas andlet den fagre dag Då landet her kvilte i heilag fred og alle hadde kjærleik å elske med.
  6. August 26th, 2003, 03:13 PM #6
    nihil
    nihil is offline
    Senior Member nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,188
    deadforg,

    Please be careful!.......this really is not a game. You should not attempt to analyse a live virus on a production machine, one that you share or one that is owned by someone else...........you will damage yourself and others!

    You need a dedicated "laboratory" or "sacrificial goat" box, that does not matter if it gets killed.

    Another point is, that if your defences are any good, they should not let you do such a thing? So you need to be running an undefended (sacrificial) system.............please do not do this on a network

    I am put in mind of the tale in Greek mythology about Pandora's Box?.............if you let one of these things loose you harm others, so be CAREFUL!!!

    I would recommend going to the AV sites such as Symantec, Nai, Panda, Kaspersky and so on; and reading up their analyses first. You then need to set yoursef up with the proper hardware and software environments..........hey, a lot of this stuff is encrypted, polymorphic, compressed etc.........?

    Once again.......please be careful...these things are dangerous, and you might harm innocent bystanders.

    Cheers
  7. August 26th, 2003, 03:18 PM #7
    SirDice
    SirDice is offline
    Just Another Geek
    Join Date
    Jul 2002
    Location
    Rotterdam, Netherlands
    Posts
    3,401
    Originally posted here by the_JinX
    slarty that will only get you blaster.. sobig is a mail virus

    so just post your mail addy on a public site and open up your outlook (express)..
    be sure to enable the preview function.. and you'll be sure to get infected..
    Sobig.F doesn't exploit any flaw in Outlook. So enabling the preview will not get you infected. For Sobig.F to infect your machine the user must run it. But you don't have to infect your machine to analyse it. Just be on the lookout for emails with an attachment that ends in .pif or .scr. Save this attachment and start analyzing.

    See the Virus Information Library for more details on how to recognise Sobig.F.
    Oliver's Law:
    Experience is something you don't get until just after you need it.
  8. August 26th, 2003, 03:28 PM #8
    NullDevice
    NullDevice is offline
    Senior Member
    Join Date
    May 2003
    Posts
    472
    havent u got mails containing it....i wonder....pass it on to some AV company they have a lot of clients being infected..........they may provide u one
    guru@linux:~> who I grep -i blonde I talk; cd ~; wine; talk; touch; unzip; touch; strip; gasp; finger; mount; fsck; more; yes; gasp; umount; make clean; sleep;
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules