MSMVPS.COM

The Ultimate Destination for Blogs by Current and Former Microsoft Most Valuable Professionals.
Welcome to MSMVPS.COM Sign in | Help
in Search

Harry Waldron - Corporate and Home Security

Latest Security Developments and Best Practices are shared to help keep users safe

Sober.Q Virus - Produces extensive SPAM in German

The new Sober.Q variant is installed automatically from existing infected Sober.P systems.  It generates extensive SPAM in German.  While these SPAM messages don't contain the virus itself, the URLs most likely point to sites could could contain adware, spyware, or possible viruses. 

PLEASE DO NOT CLICK ON ANY URLS in these messages  

http://www.f-secure.com/v-descs/sober_q.shtml

Sober.U -- Trend Micro has indepth information

W32.Sober.P@mm - Symantec

http://vil.nai.com/vil/content/v_133684.htm

Sober.Q was found on May 14th, 2005. This Sober variant doesn't spread itself in e-mails. Instead, it mass-mails political statements. Sober.Q is installed to computers infected by Sober.P. Sober.Q is written in Visual Basic.

Like many Sober variants, this variant uses it's own SMTP engine to send spammed messages to email addresses found on the infected system.  It can generate several different email messages randomly, in either English or German depending on the version of Windows.  Some messages may contain several links inside them.

Only published comments... May 17 2005, 05:38 AM by Harry Waldron

Leave a Comment

(required) 
(optional)
(required) 
Submit
Powered by Community Server (Commercial Edition), by Telligent Systems