Can I hide a part of the text by a "More..." link?
OT: Sober Variant Virus Alert
Hello Guest
  
  • Login
• Register…
• Start blog
  • Who, Where, When
• What is interesting here?
• Duels
  • Polls
• Avatars
• Interests
  • Cities and Countries
• Random blog
• Users search
  • Search
• Games
• Tests
• CarGuru
  • Ñîîáùåñòâà
• Talxy Chat
• Horoscope
• Online
 
Register!

CarGuru > Open discussion > OT: Sober Variant Virus Alert 4 May 2005 07:50:25

  Recent blog posts: 
  They have birthday today: 
  Forums:   
  Discuss: 
  Recent forum topics: 
  Recent forum comments:
  Ìîäåðàòîð:

OT: Sober Variant Virus Alert

Ken Matson 4 May 2005 07:50:25
 *What is it?*

Another variant of the Sober virus, W32/Sober.p@MM is a *Medium Risk*
mass-mailing worm hiding inside an email attachment. When run, the worm
displays a fake error message, infects the host computer and sends
itself to the email addresses that are harvested from the infected
machine. Like many Sober variants, this variant uses several different
email messages randomly, in either English or German depending on the
version of Windows.

*What should I look for?*

# *FROM:*­ /Varies/ (forged addresses taken from infected system)
# *SUBJECT:*­ Examples: /English:/ Your Password
/German:/ WM-Ticket-Auslosung­
# *BODY:*­ Examples:
/English:/ Account and Password Information are attached!
/German:/ Herzlichen Glueckwunsch,
beim Run auf die begehrten Tickets für die 64 Spiele der
Weltmeisterschaft 2006 in Deutschland sind Sie dabei.
# *ATTACHMENT:*­ account_info.zip, autoemail-text.zip,­ LOL.zip,
Fifa_Info-Text.zip,­mail_info.zip, okTicket-info.zip, our_secret.zip,
_PassWort-Info.zip

*How do I know if I've been infected? *

When the ZIP archive is extracted and the contained PIF file is manually
executed, the virus may display a fake error message which reads "Error:
CRC not complete".

*How do I find out more?*

View details about W32/Sober.p@MM here
<http://us.mcafee.c­om/root/campaign.asp­?cid=14459>.


Current Threat
-------------------­--------------------­--------------------­--------------------­-

FreeScan checks for W32/Sober.p@MM.

<http://us.mcafee.c­om/root/campaign.asp­?cid=14460>


Add comment
 

Add new comment

As:
Login:  Password:  
 
 
  
 
respect your talk pals, avoid using obscene language, typing entire messages in CAPS, posting buy/sell ads or violating netiquette or the RF Criminal Code..


CarGuru > Open discussion > OT: Sober Variant Virus Alert 4 May 2005 07:50:25

see also:
RPG -- Texas -- MXM -5
NBS Full Fields
RPG Phoenix Malcolm Result -5
pass tests:
see also:
The Regard I Lena I from Russia I h...
1998 Dodge Intrepid Key will not start…
chevy engine size

  Copyright © 2001—2009 Car-Guru
Idea: Miñhael Monashev
See Help and FAQ in the community support.car-guru.com.
Write in the community about the bugs you have noticedbugs.car-guru.com.
Write your offers and comments in the communities suggest.car-guru.com.
Information for parents.
Write us at:
If you would like to report an abuse of our service, such as a spam message, please .