Malware type: Worm

Aliases: Email-Worm.Win32.Sober.c.dat (Kaspersky), Worm/Sober.Mail.1 (Avira),

In the wild: Yes

Destructive: No

Language: English

Platform: Windows 95, 98, ME, NT, 2000, XP

Encrypted: No

Description: 

As of 9:50 AM, December 20, 2003 (US Pacific Time), TrendLabs has received numerous inquiries from Germany about this new malware.

This memory-resident worm arrives as an attachment to an email message, with varying subjects and message bodies, that is either written in English or German.

It searches for target email addresses from files with specific extension names.

This UPX-compressed worm is compiled in Visual Basic. It runs on Windows 95, 98, ME, NT, 2000 and XP.

For additional information about this threat, see:
Solution
Technical Details

Description created: Dec. 20, 2003 9:52:36 AM GMT -0800
Description updated: Dec. 20, 2003 9:52:18 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.