[ threats_virus_threats ] W32.Sober.I@mm
High Contributing Writer
2004-11-19
Insider Reports RSS Feed
W32.Sober.I@mm is a mass-mailing worm that uses its own SMTP engine to spread by sending itself as an email attachment to addresses gathered from the infected computer.
The subject of the email varies and will be in either English or German. The email sender address is spoofed. The name of the email attachment varies, and it will have a .bat, .com, .pif, .scr, or .zip file extension. The attachment may also have a double extension.
This threat is written in the Microsoft Visual Basic programming language and is compressed with UPX.
Find more information at Symantec.com.
About the Author:
High: Considered to be a high risk concern. Update all software and virus definitions. Consider it a direct threat.
More threats_virus_threats Articles
Insider Reports RSS Feed
|
|