dalkaty
3rd May 2005, 09:12 AM
[SIZE=2]I recived this e-mail today 03/05/05 just thought i would post to warn people.[/SIZE]
This mail comes to you from the Virus Emergency Response Team at
Proland Software.
A new Internet worm has been discovered in the wild. It has been named
W32/Sober.O Worm. This worm is one more variant of the W32/Sober Worm.
W32/Sober.O worm is spreading rapidly via the Internet. You are
advisable not to open any file with ZIP extension, until and unless
it is scanned from Protector Plus.
About the W32/Sober.O Worm:
W32/Sober.O is an email worm. This worm will infect Windows systems. The
worm spreads through email.
If you receive any email with any of the following subjects then it is
W32/Sober.O worm. The subject will be either in English or German.
Re:Your Password
Re: [blank]
Re:Your email was blocked
Re:mailing error
Re:Registration Confirmation
Glueckwunsch: Ihr WM Ticket
Mail-Fehler!
Ihr Passwort
Ich bin's, was zum lachen ;)
WM Ticket Verlosung
WM-Ticket-Auslosung
Ihre E-Mail wurde verweigert
The infected mail you receive will have a spoofed 'From' address, which is
picked up randomly from the infected system. The body of the infected mail
contains English or German language contents.
The worm carries an attachment and the name of the infected attachment will
be your domain name, username or from a pre-defined list maintained by the
W32/Sober.O worm. The extension of the infected attachment will be ZIP.
You can read more information about this worm at:
http://www.protectorplus.com/virusinfo/worms/sobero.htm
Instructions to remove the W32/Sober.O worm from your computer:
An emergency virus database update to detect and remove this worm is
available to the users of Protector Plus anti-virus software. To download
this update from our web site, right click on Protector Plus icon from the
system tray then select 'Update Virus Database now!' from the menu.
Others can download a 30 day, fully functional evaluation copy from:
http://www.protectorplus.com/download
The evaluation copy will detect and remove this Internet worm and also all
other known viruses, trojans and worms.
You are welcome to use this information to help any one who might need or
benefit from it. If you have questions or issues in the usage of
Protector Plus, please write to support@protectorplus.com .
This alert is coming to you from the Virus Emergency Response Team at
Proland Software. The reason this alert is being sent to you is because
either you or someone acting on your behalf, subscribed to the
Virus Alert Mailing List maintained by us.
This mail comes to you from the Virus Emergency Response Team at
Proland Software.
A new Internet worm has been discovered in the wild. It has been named
W32/Sober.O Worm. This worm is one more variant of the W32/Sober Worm.
W32/Sober.O worm is spreading rapidly via the Internet. You are
advisable not to open any file with ZIP extension, until and unless
it is scanned from Protector Plus.
About the W32/Sober.O Worm:
W32/Sober.O is an email worm. This worm will infect Windows systems. The
worm spreads through email.
If you receive any email with any of the following subjects then it is
W32/Sober.O worm. The subject will be either in English or German.
Re:Your Password
Re: [blank]
Re:Your email was blocked
Re:mailing error
Re:Registration Confirmation
Glueckwunsch: Ihr WM Ticket
Mail-Fehler!
Ihr Passwort
Ich bin's, was zum lachen ;)
WM Ticket Verlosung
WM-Ticket-Auslosung
Ihre E-Mail wurde verweigert
The infected mail you receive will have a spoofed 'From' address, which is
picked up randomly from the infected system. The body of the infected mail
contains English or German language contents.
The worm carries an attachment and the name of the infected attachment will
be your domain name, username or from a pre-defined list maintained by the
W32/Sober.O worm. The extension of the infected attachment will be ZIP.
You can read more information about this worm at:
http://www.protectorplus.com/virusinfo/worms/sobero.htm
Instructions to remove the W32/Sober.O worm from your computer:
An emergency virus database update to detect and remove this worm is
available to the users of Protector Plus anti-virus software. To download
this update from our web site, right click on Protector Plus icon from the
system tray then select 'Update Virus Database now!' from the menu.
Others can download a 30 day, fully functional evaluation copy from:
http://www.protectorplus.com/download
The evaluation copy will detect and remove this Internet worm and also all
other known viruses, trojans and worms.
You are welcome to use this information to help any one who might need or
benefit from it. If you have questions or issues in the usage of
Protector Plus, please write to support@protectorplus.com .
This alert is coming to you from the Virus Emergency Response Team at
Proland Software. The reason this alert is being sent to you is because
either you or someone acting on your behalf, subscribed to the
Virus Alert Mailing List maintained by us.