W32.Sober.F@mm

Discussion in 'malware problems & news' started by Marianna, Apr 4, 2004.

Thread Status:
Not open for further replies.
  1. Marianna

    Marianna Spyware Fighter

    Joined:
    Apr 23, 2002
    Posts:
    1,215
    Location:
    B.C. Canada
    Discovered on: April 03, 2004
    Last Updated on: April 04, 2004 10:35:24 AM

    W32.Sober.F@mm is a variant of W32.Sober.E@mm that spreads by sending itself as an email attachment using its own SMTP engine. The worm also attempts to download and execute a file from a remote Web site.

    The Subject: and Body: of the email vary and are written in German.

    W32.Sober.F@mm is written in Microsoft Visual Basic and is packed with UPX.



    Variants: W32.Sober.E@mm
    Type: Worm
     
    Marianna, Apr 4, 2004
    #1
  2. gerardwil

    gerardwil Registered Member

    Joined:
    Jan 17, 2004
    Posts:
    4,748
    Location:
    EU
    Some more info over here:

    http://vil.nai.com/vil/content/v_101154.htm

    Gerard
     
    gerardwil, Apr 4, 2004
    #2
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...