Sober worm is hidden behind old class photos

Sober.R variant is spreading rapidly via e-mail containing attachments, disguised as being sent from a classmate. However, if the file is opened, the victim will inadvertently turn his PC into a remote-controlled zombie machine.

Sober.R after crawling into the computer will quickly seek to steal information and send them to other addresses stored on the computer. Similar to previous versions, it can be distributed in both English and German versions via the zip file "PW_Klass.Pic.packed-bitmap.exe." with the sole purpose of stealing information from as many victims as possible. Sophos security software company (UK) said they are currently the second most appeared virus in the ranking and account for 10% of the total number of dangerous programs recorded yesterday.

However, US anti-virus vendor Symantec underestimated and ranked Sober.R at a low level of threat. Experts of the company said that although they have witnessed some cases, the virus will not be able to become a Blaster in the future. First, companies and users are more alert to the dangers lurking in attachments. Businesses also implement many measures to block files containing malicious code and users are always suspicious every time they receive spam, even when it looks like it comes from friends. Second, virus writers are concentrating their full power on purposeful attacks to make money instead of resonating. Sober "flood" will not be possible at this time.

Sober began to appear in 2003 and many variants have topped the chart this year, especially Sober.Q expressed disdain, racism, propaganda for Germany's right-wing faction, and one Other worms, Sober.S, offer tickets for the World Cup for free.