W32/Sober.c@MM is a Medium Risk mass-mailing worm. The worm arrives as an email with varying subject lines and message bodies (in English and German). When run, the worm displays a series of fake error messages. It then infects the host computer and emails itself to email addresses collected from the victim's machine.

The worm tries to stay alive on an infected system by running two processes concurrently. Upon termination of one of the processes, the other process restarts the worm very quickly.

Caution: An infected email can come from addresses you recognize and may contain the following information:


What are the common subject lines and attachment names associated with W32/Sober.c@MM?

Subject: Betr: Klassentreffen, Testen Sie ihren IQ, Bankverbindungs- Daten, Neuer Dialer Patch!, Ermittlungsverfahren wurde eingeleitet, Ihre IP wurde geloggt, Sie sind ein Raubkopierer, Sie tauschen illegal Dateien aus, Ich hasse dich, Ich zeige sie an!, Sie Drohen mir, you are an idiot, why me?, I hate you, Preliminary investigation were started, Your IP was logged, You use illegal File Sharing ...

Attachment: iq4you-german-test.com
freewantiv.com, free4manga.com, free4share4you.com, tagespolitik-umfragen.com, onlinegamerspro-worm.com, freegames4you-gzone.com, boards4all-terror432.com, anime4allfree.com, animepage43252.com, yourmail, alledigis, aktenz


Learn More about W32/Sober.c@MM
Scan for W32/W32/Sober.c@MM


sia