[PBARC] W32.Sober.O@mm Virus alert

WOLF, EARNEST G EWOLF at entergy.com
Mon May 2 15:25:48 EDT 2005


The DeepSight Threat Analyst Team is raising the ThreatCon to 

          Level 2 in response to W32.Sober.O at mm being increased to a

          category 3 threat.  The mass mailing worm W32.Sober.O may

          arrive as an attachment named account_info-text.zip,

          mail_info.zip, or our_secret.zip. The zip archives contain a

          malicious executable named "Winzipped-Text_Data.txt

          .exe". Although the file appears to be a text file it

          actually has a double extension of exe or pif and is the

          worms binary executable.

 


More information about the PBARC mailing list