There are some new variants of Sober virus
At the end of November 15, security companies warned of the emergence of some extremely dangerous variants of the Sober virus that attack Windows computers. Fortunately, these variants are not as dangerous as previous versions and have a fast rate of infection.
Both security companies Kaspersky Lab and Symantec have found three variants of Sober named E-mail-Worm.Win32.Sober,W32.Sober.S@mm.
Kaspersky said that all of these variants were made from a unique "fabrication" virus program, spread across e-mail, especially through spam in the form of attachments.
The e-mails containing these Sober variants do not have a subject line, but the files named below are certainly Sober: Exceltab-packed_list.exe;Liste.zip;Reg-List-Dat_Packer2.exe;reg_text.zip;Word-Text.zip;Word-Text_packedList.exe;Word-Text_packedList.zip.
Sober will jump immediately to the computer when the user double-clicks on the above compressed files.The computer will warn with an error message 'WinZip Self-Extractor.WinZip_Data_Module is missing ~ Error '.They will copy themselves in the Windows system directory as well as register to the Registry to automatically operate when the computer starts.
Sober variants mainly operate in English and German, and all use SMTP e-mail protocol to infect.Their spread severely disrupted the operation of e-mail management servers, as well as sluggish computers.
The latest updated anti-virus tools from Kaspersky, Symantec, McAfee . can kill these Sober variants.
HOANG HAI
You should read it
- The algorithm of 'killer' Sober has been broken
- Sober will return on January 5, 2006
- Sober worm is hidden behind old class photos
- Sober attacks Hotmail and MSN
- Sober is not scary! We are ready
- Sober worm returned
- The project of integrating the name virus has been criticized
- Sober is back today?
- Sober is the most dangerous virus of 2005
- Spamta worm has 67 new variants
- Top 10 most dangerous viruses in November
- Yahoo's new mail looks better than you think