myITforum.com

Welcome to myITforum.com Sign in | Join | Help
in Search

Harry Waldron - My IT Forums Blog

Sharing Security Developments, and Best Practices for corporate and home users

Sober.Q Virus - Produces extensive SPAM in German

The new Sober.Q variant is installed automatically from existing infected Sober.P systems.  It generates extensive SPAM in German.  While these SPAM messages don't contain the virus itself, the URLs most likely point to sites could could contain adware, spyware, or possible viruses. 

PLEASE DO NOT CLICK ON ANY URLS in these messages  

http://www.f-secure.com/v-descs/sober_q.shtml

Sober.U -- Trend Micro has indepth information

W32.Sober.P@mm - Symantec

http://vil.nai.com/vil/content/v_133684.htm

Sober.Q was found on May 14th, 2005. This Sober variant doesn't spread itself in e-mails. Instead, it mass-mails political statements. Sober.Q is installed to computers infected by Sober.P. Sober.Q is written in Visual Basic.

Like many Sober variants, this variant uses it's own SMTP engine to send spammed messages to email addresses found on the infected system.  It can generate several different email messages randomly, in either English or German depending on the version of Windows.  Some messages may contain several links inside them.

Comments

No Comments
Powered by Community Server (Commercial Edition), by Telligent Systems