Sober.K Worm - new variant to watch
AV companies are now evaluating this new variant further. Hopefully it will continue to stay low-risk.
Sober.K Worm - new variant to watch
http://secunia.com/virus_information/15558/sober.k/
http://www.sarc.com/avcenter/venc/data/w32.sober.k@mm.html
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM%5FSOBER%2EK
http://www.f-secure.com/v-descs/sober_k.shtml
Sober.K worm was seeded in e-mails on 21st of February 2005. It is quite similar to the previous variants. Sober.K sends itself as an attachment in e-mail messages with English or German texts. The worm sends different types of e-mail messages with English and German texts and its file attached. The attachment is a ZIP archive containing the worm's executable. Before spreading the worm scans files with certain extensions on all hard disks to harvest e-mail addresses.