|
|
#1
May 14th, 2005, 04:46 PM
|
|||
|
|||
Sober.q
Sober.q will be around soon. Update your scanners to detect it as soon as it spreads.
(I read this on KAV weblog)
__________________
http://www.av-comparatives.org AV-Comparatives WEBLOG / FORUM AV-Comparatives Fan-Page on Facebook Not speaking here on behalf of AV-Comparatives. Post questions in our forum. |
|
#4
May 15th, 2005, 04:41 AM
|
||||
|
||||
Re: Sober.q
They probably monitored the "update" URL's that the previous Sober is trying to download files from. The trigger date for updating of the last Sober variant passed a few days ago, so the author probably placed the new variant.
We detect it as Sober.Gen.
__________________
Chuck Norris does not use any antivirus software. He knows the hashes of all clean software on earth. Even those that are not compiled yet. It is not known if he got that list from dividing by zero or counting to infinity. |
|
#5
May 15th, 2005, 07:14 AM
|
||||
|
||||
|
Re: Sober.q
The new Sober started to send out spam (some rightwing crap) this night, trigger date was 11th of May, 4 days later is the date to start spamming. The first spam mails arrived at midnight.
12 days after the trigger date it is supposed to download updates. So this is not an email worm, it's a trojan spammer. It doesn't have code to send attachments.
__________________
Chuck Norris does not use any antivirus software. He knows the hashes of all clean software on earth. Even those that are not compiled yet. It is not known if he got that list from dividing by zero or counting to infinity. |
|
#6
May 15th, 2005, 08:54 AM
|
|||
|
|||
|
Re: Sober.q
Thanks for the heads up!
Not many Av's have updated yet for it? As you said KAV has the update and F-secure updated yesterday but Symantec, Trend, AVG and Avast no sign of update yet. Had a look at VirusTotal and cant see any samples submitted yet so it will be interesting to see how quickly and if this spreads. Cheers Jlo |
|
#7
May 15th, 2005, 08:57 AM
|
||||
|
||||
|
Re: Sober.q
It was uploaded at Jotti and VirusTotal, so all antivirus companies should have a sample by now.
As it is only a trojan, it doesn't self-replicate/email. So there is no danger except the spam it sends.
__________________
Chuck Norris does not use any antivirus software. He knows the hashes of all clean software on earth. Even those that are not compiled yet. It is not known if he got that list from dividing by zero or counting to infinity. |
| « Previous Thread | Next Thread » |
| Thread Tools | Search this Thread |
|
|
Re: Sober.q
