Additional Details
This Sober variant sends a bit different e-mail messages:
Subject:
Hi, Ich bin's
Body:
Hier ist die Liste die du haben wolltest.
Du solltest dich aber auch eintragen!
OK, bis dann
Attachment name starts with:
Liste
---- OR ----
Subject:
Thanks for your registration
Body:
Thanks for your registration!
We have received your payment.
For more detailed information, read the attached text.
Attachment:
reg_text.zip
Detection
Sober.V worm is detected with the following F-Secure Anti-Virus
updates:
Version=2005-11-15_01
Writeup:
Alexey Podrezov; November 15th, 2005;