Win32/Sobig.F@mm


I_Worm



HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentV ersionRun
"TrayX"="C:WINDOWSwinppr32.exe /sinc"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVe rsionRun
"TrayX"="C:WINDOWSwinppr32.exe /sinc"




Subject:

"Re: That movie"
"Re: Wicked screensaver"
"Re: Your application"
"Re: Approved"
"Re: Re: My details"
"Re: Details"
"Your details"
"Thank you!"
"Re: Thank you!"


Attachment:
"movie0045.pif"
"wicked_scr.scr"
"application.pif"
"document_9446.pif"
"details.pif"
"your_details.pif"
"thank_you.pif"
"document_all.pif"
"your_document.pif"


Body:
"Please see the attached file for details."

"See the attached file for details"

http://www.alriyadh.com.sa/Contents/.../News_2219.php




(.) .
(.) .
.
45 . " ".
"" "" "" "" .
(.) (.) .
.
11 5 24.
.
(.) .



( )
: sobig.F
.
"