There Are Some New Variants of Sober Virus

This updated guide examines There Are Some New Variants of Sober Virus and organizes the essential facts, background, and practical takeaways in clear American English.

Windows warnings issued when Sober stopped the connection.

Both security companies Kaspersky Lab and Symantec have found three variants of Sober named E-mail-Worm. Win32. Sober,W32. Sober. S@mm.

Kaspersky said that all of these variants were made from a unique "fabrication" virus program, spread across e-mail, especially through spam in the form of attachments.

The e-mails containing these Sober variants do not have a subject line, but the files named below are certainly Sober: Exceltab-packed_list.exe;Liste.zip;Reg-List-Dat_Packer2.exe;reg_text.zip;Word-Text.zip;Word-Text_packedList.exe;Word-Text_packedList.zip.

Sober will jump immediately to the computer when the user double-clicks on the above compressed files. The computer will warn with an error message 'WinZip Self-Extractor. WinZip_Data_Module is missing ~ Error '. They will copy themselves in the Windows system directory as well as register to the Registry to automatically operate when the computer starts.

Sober variants mainly operate in English and German, and all use SMTP e-mail protocol to infect. Their spread severely disrupted the operation of e-mail management servers, as well as sluggish computers.

The latest updated anti-virus tools from Kaspersky, Symantec, McAfee. can kill these Sober variants.

HOANG HAI