Header Content

A variant of W32/Sober.gen@MM, W32/Sober@MM!M681 is another mass-mailing worm hiding inside a spam email attachment making its way around the net this weekend. When run, the virus displays a fake error message, infects the host computer then sends itself to stolen email addresses.
Here’s some info from the folks at McAfee:
What should I look for? FROM: Varies
SUBJECT: Examples: Registration Confirmation; Paris Hilton Nicole Richie; hi, ive a new mail address
BODY: Example: hey its me, my old address dont work at time. i dont know why?! in the last days ive got some mails. i’ think thaz your mails but im not sure! How do I know if I’ve been infected?
Fake error message (”Error in packed Header”) displayed. Outgoing messages as noted above.
Note: Receiving an email alert stating that the virus came from your email address is not necessarily an indication you are infected. Mass-mailing viruses often forge (or “spoof”) the from address.
What can I do? Keep your anti-virus protection current.

This entry was posted on Saturday, November 26th, 2005 at 10:07 am and is filed under Worms/Viruses. You can follow any responses to this entry through the RSS 2.0 feed. You can skip to the end and leave a response. Pinging is currently not allowed.