19 November 2004

VIRUS ADVISORY: W32/Sober.j@MM - Medium Risk

From McAfee Dispatch:

FROM: Varies (forged addresses taken from infected system)
SUBJECT: Example: FwD: illegal signs in your email
BODY: Example: More info about--GZIP--under: wwwgzip.org
ATTACHMENT: Examples: mail.4052.scr, verisign.2095.pif,
re_mail8831.bat

--> How do I know if I've been infected?

Fake error messages displayed. Increased network traffic on
TCP port 37. Alerts from a desktop firewall (if installed)
that a new application is trying to access the Internet.

--> How do I find out more?

View details about W32/Sober.j@MM here.
http://us.mcafee.com/root/campaign.asp?cid=12696

1 comment:

  1. That description actually makes the virus seem rather pathetic.

    ReplyDelete