Oprano Adult Industry Forums - View Single Post

Sharpie · 11-04-2003

This is the info I found:

Wednesday October 29, 01:04 PM

Few PCs get hammered by Sober worm

By Dick O'Brien

A new worm, known as Sober, has been doing the rounds and despite the threat it presents to Windows users, security firms are not overly concerned.

While the worm has only garnered public attention in the past day or two, it was reported by anti-virus vendor Symantec (NASDAQ: SYMC - news) on 24 October. According to Symantec, Sober is a mass-mailing worm that uses its own SMTP engine to spread itself. The subject of the e-mail varies, and it will be in either English or German.

The subject line of the mail varies and may either purport to be a warning of a virus or genuine correspondence, such as "Re (Milan: AISW.MI - news) : Contact." The infected attachment may have any one of a number of file names and can come with a .bat, .com, .exe, .pif, or .scr file extension.

If opened the worm may display a fake error message of "file not complete." It will then copy itself into the system folder on the infected machine. It will also alter the computer's registry, enabling to run every time the machine is started. Following that it will collect all e-mail addresses it can find on the machine and mail itself using its own SMTP engine. Aside from varying subject lines and file names, the body of infected e-mails can vary and may be written in either German or English.

Symantec is attaching a low threat level to the worm. F-Secure labelled it as a medium level threat. McAfee also attached a low risk level to the worm.

"We're monitoring this virus at the moment, but at this stage we aren't attaching a very high level of risk to it," said Dermot Williams, managing director at Irish security company Systemhouse Technologies. The fact that many messages may be in German may hinder its spread. "We would hope that people in English speaking areas would have a higher threshold of suspicion on encountering this virus," Williams explained.

Anti-virus vendors are advising that users keep their anti-virus software updated. Full instructions for manual removal have also been posted on the Web sites of most anti-virus firms.

11-04-2003	#4
Sharpie Members Join Date: Oct 2002 Posts: 747	This is the info I found: Wednesday October 29, 01:04 PM Few PCs get hammered by Sober worm By Dick O'Brien A new worm, known as Sober, has been doing the rounds and despite the threat it presents to Windows users, security firms are not overly concerned. While the worm has only garnered public attention in the past day or two, it was reported by anti-virus vendor Symantec (NASDAQ: SYMC - news) on 24 October. According to Symantec, Sober is a mass-mailing worm that uses its own SMTP engine to spread itself. The subject of the e-mail varies, and it will be in either English or German. The subject line of the mail varies and may either purport to be a warning of a virus or genuine correspondence, such as "Re (Milan: AISW.MI - news) : Contact." The infected attachment may have any one of a number of file names and can come with a .bat, .com, .exe, .pif, or .scr file extension. If opened the worm may display a fake error message of "file not complete." It will then copy itself into the system folder on the infected machine. It will also alter the computer's registry, enabling to run every time the machine is started. Following that it will collect all e-mail addresses it can find on the machine and mail itself using its own SMTP engine. Aside from varying subject lines and file names, the body of infected e-mails can vary and may be written in either German or English. Symantec is attaching a low threat level to the worm. F-Secure labelled it as a medium level threat. McAfee also attached a low risk level to the worm. "We're monitoring this virus at the moment, but at this stage we aren't attaching a very high level of risk to it," said Dermot Williams, managing director at Irish security company Systemhouse Technologies. The fact that many messages may be in German may hinder its spread. "We would hope that people in English speaking areas would have a higher threshold of suspicion on encountering this virus," Williams explained. Anti-virus vendors are advising that users keep their anti-virus software updated. Full instructions for manual removal have also been posted on the Web sites of most anti-virus firms.