W32.Sober.E@mm

Discussion in 'malware problems & news' started by Marianna, Mar 28, 2004.

Thread Status:
Not open for further replies.
  1. Marianna

    Marianna Spyware Fighter

    Joined:
    Apr 23, 2002
    Posts:
    1,215
    Location:
    B.C. Canada
    Discovered on: March 27, 2004
    Last Updated on: March 28, 2004 02:49:08 PM

    W32.Sober.E@mm is a variant of W32.Sober.D@mm that spreads by sending itself as an email attachment using its own SMTP engine.

    The Subject: and Body: of the email vary and is written in English.

    The worm also attempts to download and execute a file from a remote website.

    W32.Sober.E@mm is written in Microsoft Visual Basic and is packed with UPX.



    Variants: W32.Sober.D@mm
    Type: Worm

    More: http://securityresponse.symantec.com/avcenter/venc/data/w32.sober.e@mm.html
     
Thread Status:
Not open for further replies.