Sober variant set to cause trouble

Antivirus firm Network Associates today raised to 'medium' its risk assessment of the recently discovered Windows worm Sober.f.

Sober.f is a prolific worm that spreads via email, sending itself to addresses found on the victim's machine.

The worm has many of the same functionalities as its predecessors: it comes in the form of an attachment and contains a varying filename.

Users need to manually run the attachment in order to be infected.

After executing, Sober.f emails itself out as an attachment with a random filename and installs itself to the victim machine's system directory using a filename constructed from a string pool carried within the worm.

Sober.f, which is reported to be difficult to find and hides from many antivirus scanners, was first reported to researchers earlier today. To date, Network Associates has received more than 100 reports of the virus in the wild.

Further information on the worm and instructions for its removal are available from Network Associates here.

See also:

Alert level raised on latest sober mutant

You've got mail, but be careful  19 Apr 2005

Sober worm about to cause major hangover

Latest variant begins the rounds  19 Nov 2004

F-Secure warns on software flaw

Holes in vendor's antivirus software leave users vulnerable to hackers and worms  06 Apr 2004

New worm masquerades as Microsoft update

Sober variant employs latest social engineering technique  08 Mar 2004

Worms still number one security threat

MyDoom.A and Sober C lead the pack, Bagel and Netsky catching up fast  03 Mar 2004

Like this story? Spread the news by clicking below:

 del.icio.us     Digg this     reddit!