Hi, I'm beyond certain that I have this virus, also known as Sobig.F [F-Secure], W32/Sobig.f@MM [McAfee], WORM SOBIG.F [Trend]. I checked Symantec's Security Response section, downloaded the fix/removal tool, followed the instructions and my computer is [supposedly] clean. What now? I'm still having "symptoms" of this virus. However, nothing Norton's site claims will be in my registry is there when I check. I'm at a loss here. Any advice??? - JS

Try doing a Windows update.

Hi, I tried, but it didn't help. I'm now assuming that someone in my family with my email address in their address book has this virus. What other explanation could there be? - JS

The worm can "spoof" email addresses, i.e. use false sender details. The worm may be sending email out from somebody's else computer, but making it appear that the email comes from you. If the email you are receiving is a problem, you can use your security software to block emails with certain subject lines. More info here http://www.us.sophos.com/support/disinfection/sobigf.html#1 Hope this helps Alan56

The worm will fake the sender's e-mail id. According to Solo Antivirus site " The worm spoofs the sender's e-mail id. So it is very difficult to find the infected user. If an infected user contains your e-mail id, Sobig.F will send infected mails using your e-mail id too. So you will receive virus warning messages and undeliverable messages. " For more details, visit Solo antivirus site at http://www.srnmicro.com/virusinfo/sobigf.htm Have a nice day

Hi, That's exactly the problem. You see, there are two computers in my home, networked. I shut off all services, networking, etc. and checked the registry keys on both computers. I searched for various files, "clues", and used every known removal tool I could find. The virus itself is not actually on either of my home computers. Now, the problem is that I have to contact every friend/family member I know of and ask them to try to do the same on THERE computer(s). This virus is a MAJOR pain in the arse. Does anyone know of ANY possible ways of getting around the spoofing the virus uses to maybe determine who ACTUALLY has the virus on the computer(s)? Thanks again... - JS