Jump to content
IGNORED

Virus About


turbo

Recommended Posts

Just got an e-mail from Mcafee titiled VIRUS ADVISORY: W32/Sober.r@MM any ideas?

It's a medium effect virus and here is the list from Sophos Anti-Virus agency.....

The worm has duped some computer users with its ability to check the domain of the recipient's email address and change the text language accordingly. If it is '.de' (Germany), '.li' (Liechtenstein), '.at' (Austria) or '.ch' (Switzerland), the subject line and message text are displayed in German. All other recipient addresses receive an English subject and body text. If an infected email attachment is opened, the Sober worm starts to spread by collecting email addresses found on the infected user's computer and sending itself to each of them.

The displayed text uses sophisticated techniques to convince the user to double-click on the attachment, such as pretending to be an operating system patch to safeguard the recipient's computer or anti-virus protection to protect the user against viruses. In one instance, the virus writer praises the Sobig worm's author with the following text:

"Congratulations!! Your Sobig Worms are very good!!!

You are a very good programmer!

Yours faithfully

Odin alias Anon"

"Sober-A is the latest in a string of recent worms to trick Windows users by pretending to be attachments that deal with security," said Carole Theriault, security consultant at Sophos. "These worms play on computer users' fears and can be difficult to spot with email subject lines and messages chosen at random. The message is simple - treat all unsolicited emails with caution and keep your anti-virus software up to date to stop these worms dead in their tracks."

Sophos advises users never to accept security updates that arrive as email attachments, and to use pro-active threat reduction technology to block dangerous file types at the email gateway.

asically, do not accept any update via email and you should be OK. Any email with an attachment saying 'Sober'.

If you do open any email or email attachments, it will infect your PC and send the virus to everyone in Outlook.

The 'A Card for You' is harmless and is a hoax.

Hope this helps.

MM

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...