x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
SPECIAL OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET A 50% OFF
x
CHRISTMAS OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 40% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 50% OFF
x
BLACKFRIDAY OFFER
Buy the best antivirus
at the best price
TODAY ONLY UP TO 70% OFF
x
CYBERMONDAY OFFER
Buy the best antivirus
at the best price
(Only for homeusers)
TODAY ONLY UP TO 70% OFF
Active Scan. Scan your PC free
Panda Protection

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Encyclopedia GetVirusCard True 0

Sobig.F.dam

 
Threat LevelModerate threatDamageHighDistributionNot widespread
Common name:Sobig.F.dam
Technical name:W32/Sobig.F.dam
Threat level:Low
Type:Worm
Effects:  It does not have any destructive effects.

Affected platforms:

Windows XP/2000/NT/ME/98/95

First detected on:Sept. 4, 2003
Detection updated on:Jan. 3, 2007
StatisticsNo

Brief Description 

    

Sobig.F.Dam is a damaged and harmless version of a dangerous worm called Sobig.F.

When this worm is sent via e-mail it can sometimes be damaged when it reaches target computers. The reason for this is that the full code of the worm is not included and therefore it cannot function correctly, preventing it from running and infecting computers.

Due to the large number of incidents reported, Panda has decided to include a special detection routine for this damaged virus. This worm will be detected under its technical name W32/Sobig.F.Dam.

This detection routine will warn users if they have received a damaged version of Sobig.F, which is completely harmless. However, it is a warning sign that the dangerous Sobig.F could attack users.

The characteristics of the message carrying Sobig.F.Dam are the same as those for Sobig.F and therefore there is no way of knowing if the worm you have received is damaged or not.

As this worm does not function correctly, simply delete all the messages and files in which Sobig.F.Dam is detected.

Visible Symptoms 

    

Sobig.F.Dam is easy to recognize when it spreads via e-mail, as it reaches the computer in a message with the following characteristics:

  • Subject:
    It can be one of the following:
    Re: Thank you
    Thank you!
    Your details
    Re: Details
    Re: Re: My details
    Re: Approved
    Re: Your application
    Re: Wicked screensaver
    Re: That movie
  • Attachments:
    It can be one of the following:
    YOUR_DOCUMENT.PIF
    DOCUMENT_ALL.PIF  
    THANK_YOU.PIF  
    YOUR_DETAILS.PIF   
    DETAILS.PIF
    DOCUMENT_9446.PIF  
    APPLICATION.PIF
    WICKED_SCR.SCR
    MOVIE0045.PIF