Topics
General News Antivirus Reviews Network Defense Spyware Anti-Spam Phishing Scams Virus Alerts

Featured Product
Antivirus for your email server! Virus & content check mail with 5 virus scanning engines. Free 30 day trial available! Download Free Trial

Security Forums
Desktop Security Malware Removal Help Spam Blocking Patches and Hotfixes Network Security Firewalls and Routers Intrusion Detection Web Proxies Antivirus Support Symantec McAfee Trend Micro Other Antivirus

Quick Resources
About Antisource Malware Threats Triangle Free Virus Scan Virus Map

Sober sends Registration Confirmation

Tuesday, November 15, 2005
Author: Richard S. Westmoreland
Permalink: sober-registration-zip-word

Virus Alerts

Be aware of a new Sober variant making its way around the Internet. It sends an email with the following details:

Subject: Registration Confirmation
Message: Thanks for your registration.
Your data are saved in the zipped Word.doc file!
Attachment: registration.zip

The zip file contains another file called Word-Text_packedList.exe. If you extract this file, it attempts to disguise itself by using the actual Microsoft Word icon.

If you accidentally execute this worm, you can identify it by looking for concon.www and services.exe in C:/Windows/ConnectionStatus/Microsoft.

More information about this worm can be found at:

McAfee - Sober.T