W32.Sober.F@mm

Discussion in 'malware problems & news' started by Marianna, Apr 4, 2004.

Thread Status:
Not open for further replies.
  1. Marianna

    Marianna Spyware Fighter

    Joined:
    Apr 23, 2002
    Posts:
    1,215
    Location:
    B.C. Canada
    Discovered on: April 03, 2004
    Last Updated on: April 04, 2004 10:35:24 AM

    W32.Sober.F@mm is a variant of W32.Sober.E@mm that spreads by sending itself as an email attachment using its own SMTP engine. The worm also attempts to download and execute a file from a remote Web site.

    The Subject: and Body: of the email vary and are written in German.

    W32.Sober.F@mm is written in Microsoft Visual Basic and is packed with UPX.



    Variants: W32.Sober.E@mm
    Type: Worm
     
  2. gerardwil

    gerardwil Registered Member

    Joined:
    Jan 17, 2004
    Posts:
    4,748
    Location:
    The Netherlands
    Some more info over here:

    http://vil.nai.com/vil/content/v_101154.htm

    Gerard
     
Thread Status:
Not open for further replies.