Name virus : Sober
Variant : w32.sober.x@mm.worm
Also known as : WORM_SOBER.AG, W32/Sober-{X, Z}, Win32.Sober.W
OS : Microsoft Windows
Spreads through e-mail (german or english) in an attachment. bij opening the attachment the worm gets activated and spreads further. The sender of this e-mail is spoofed (fake).
Possible name of the attachment:
- Anzeige.zip
- Email.zip
- Email_text.zip
- Ebay.zip
- Ebay-User_RegC.zip
- reg_pass.zip
- reg_pass-data.zip
- mail.zip
- mail_body.zip
- mailtext.zip
- downloadm.zip
The fbi/cia one comes with the following attachment:
- question_list.zip
- list.zip
- Akte.zip (german version)
W32.Sober Removal Tool
/ 
