Common Tasks

Recent Posts

Community

Email Notifications

Personal Links

Archives

Security Protection - Harry Waldron (CS)

Security Best Practices, Breaking News, & Updates

Sober.K Worm - new variant to watch

AV companies are now evaluating this new variant further.  Hopefully it will continue to stay low-risk. 

Sober.K Worm - new variant to watch
http://secunia.com/virus_information/15558/sober.k/
http://www.sarc.com/avcenter/venc/data/w32.sober.k@mm.html
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM%5FSOBER%2EK
http://www.f-secure.com/v-descs/sober_k.shtml

Sober.K worm was seeded in e-mails on 21st of February 2005. It is quite similar to the previous variants. Sober.K sends itself as an attachment in e-mail messages with English or German texts.  The worm sends different types of e-mail messages with English and German texts and its file attached. The attachment is a ZIP archive containing the worm's executable. Before spreading the worm scans files with certain extensions on all hard disks to harvest e-mail addresses.