From McAfee Dispatch:
FROM: Varies (forged addresses taken from infected system)
SUBJECT: Example: FwD: illegal signs in your email
BODY: Example: More info about--GZIP--under: wwwgzip.org
ATTACHMENT: Examples: mail.4052.scr, verisign.2095.pif,
re_mail8831.bat
--> How do I know if I've been infected?
Fake error messages displayed. Increased network traffic on
TCP port 37. Alerts from a desktop firewall (if installed)
that a new application is trying to access the Internet.
--> How do I find out more?
View details about W32/Sober.j@MM here.
http://us.mcafee.com/root/campaign.asp?cid=12696
That description actually makes the virus seem rather pathetic.
ReplyDelete