Worm alert - W32.Sober.C1

Discussion in 'NOD32 version 2 Forum' started by 747john, Jan 20, 2004.

Thread Status:
Not open for further replies.
  1. 747john

    747john Registered Member

    Joined:
    Jan 20, 2004
    Posts:
    1
    Anyone knows anything about this variant?
    2 inbound emails to my 2 add were blocked by my ISP.
    Origin a modified self address!!!
    Run full scan Nod32 = nothing infected
    Run Sober remove tool from Nod32 & Symantec = not infected. Could not find any info on this particular variant.
    Thanks
     
  2. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    Hi John,

    You'll find info concerning ths one over here ;).


    Seems your ISP's mail-antivirus service grabbed it before it reached your inbox - therefore the IMON did not have to do its job. Your system surely isn't infected by those emails ;).

    regards.

    paul
     
  3. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Most worms fake the real sender address, hence you might have received a notification that an email you sent was undelivered for that it contained an infected attachment.
     
Thread Status:
Not open for further replies.