Worm alert - W32.Sober.C1

Discussion in 'NOD32 version 2 Forum' started by 747john, Jan 20, 2004.

Thread Status:
Not open for further replies.
  1. 747john

    747john Registered Member

    Joined:
    Jan 20, 2004
    Posts:
    1
    Anyone knows anything about this variant?
    2 inbound emails to my 2 add were blocked by my ISP.
    Origin a modified self address!!!
    Run full scan Nod32 = nothing infected
    Run Sober remove tool from Nod32 & Symantec = not infected. Could not find any info on this particular variant.
    Thanks
     
    747john, Jan 20, 2004
    #1
  2. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,475
    Location:
    The Netherlands
    Hi John,

    You'll find info concerning ths one over here ;).


    Seems your ISP's mail-antivirus service grabbed it before it reached your inbox - therefore the IMON did not have to do its job. Your system surely isn't infected by those emails ;).

    regards.

    paul
     
    Paul Wilders, Jan 20, 2004
    #2
  3. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,456
    Most worms fake the real sender address, hence you might have received a notification that an email you sent was undelivered for that it contained an infected attachment.
     
    Marcos, Jan 20, 2004
    #3
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...