There are some new variants of Sober virus

Windows warnings issued when Sober stopped the connection.

At the end of November 15, security companies warned of the emergence of some extremely dangerous variants of the Sober virus that attack Windows computers. Fortunately, these variants are not as dangerous as previous versions and have a fast rate of infection.

Both security companies Kaspersky Lab and Symantec have found three variants of Sober named E-mail-Worm.Win32.Sober,W32.Sober.S@mm.

Kaspersky said that all of these variants were made from a unique "fabrication" virus program, spread across e-mail, especially through spam in the form of attachments.

The e-mails containing these Sober variants do not have a subject line, but the files named below are certainly Sober: Exceltab-packed_list.exe;Liste.zip;Reg-List-Dat_Packer2.exe;reg_text.zip;Word-Text.zip;Word-Text_packedList.exe;Word-Text_packedList.zip.

Sober will jump immediately to the computer when the user double-clicks on the above compressed files.The computer will warn with an error message 'WinZip Self-Extractor.WinZip_Data_Module is missing ~ Error '.They will copy themselves in the Windows system directory as well as register to the Registry to automatically operate when the computer starts.

Sober variants mainly operate in English and German, and all use SMTP e-mail protocol to infect.Their spread severely disrupted the operation of e-mail management servers, as well as sluggish computers.

The latest updated anti-virus tools from Kaspersky, Symantec, McAfee . can kill these Sober variants.

HOANG HAI