You can download a sample for a short time only at: http://trillian.earth.li/mbox.Sobig.E
Interestingly the virus is contained within a .zip file .. which (according to http://www.f-secure.com/v-descs/sobig_e.shtml is normaly for this virus). Other than that I think it's a fairly boring Windows executable. Unfortunately I think my employer wants me to do some work rather than create signatures so someone else will have to do that. -- Stephen White <[EMAIL PROTECTED]> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]