BleepingComputer.com > Sober Worm Stalls Msn, Hotmail

Full Version: Sober Worm Stalls Msn, Hotmail

BleepingComputer.com > Security > Breaking Virus & Security News

quietman7

Dec 3 2005, 01:12 PM

QUOTE

Sober worm stalls MSN, Hotmail
By Greg Sandoval
Staff Writer, CNET News.com
Published: December 2, 2005, 5:40 PM PST

A variant of Sober known as Win32/Sober.Z@mm is pummeling servers at Hotmail and MSN with "unusually high mail load," causing delays in e-mail delivery to Hotmail and MSN customers...Internet service providers besides Comcast may be having problems directing e-mail to Hotmail and MSN servers.

news.com

acklan

Dec 5 2005, 01:38 AM

I received an email via Yahoo with an attachment that had the same virus onboard.
What does this variant do?

quietman7

Dec 5 2005, 05:41 AM

The Sober worm can hijack a Windows-based computer and force it to repeatedly send spam e-mails. The continuous e-mailing can lead to overloaded servers and reduced network performance. This newest member of the Sober family is turning out to be the most extensive virus outbreak of this year and has been classified as high risk by FRISK Software's virus experts,

When first run it creates the directory "WinSecurity" in the Windows directory and creates there three copies of itself under the names "services.exe","smss.exe" and "csrss.exe". When it's first run it displays a bogus error message, executes all the newly created copies of the worm and exits.
http://www.f-prot.com/virusinfo/descriptions/sober_z.html

The following symptoms may be a result of infection by this worm:
http://safety.live.com/site/en-US/virusenc...?virusid=299032

acklan

Dec 5 2005, 07:28 AM

Thanks. Good to know. I found the list of virus' and the problems they cause at F-secure. Thanks again for the quick response.

quietman7

Dec 5 2005, 10:29 AM

Your quite welcome acklan.

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.