Internet Worm Information (W32.Sober.X@mm)

[Mike Buras]

This is a message from CTLS-L.
Selecting "Reply" will send a message to the originator.
Selecting "Reply to All" will send a message to the entire list.
---------------------------------------------------------

As you may have already heard, there is yet another computer worm (virus) spreading rapidly through the Internet.  Known as [EMAIL PROTECTED] by Symantec, W32/[EMAIL PROTECTED] by McAfee, and also a number of other aliases, the worm spreads via email.  It harvests email addresses from an infected computer and then uses the harvested addresses to send itself, producing an email message with a spoofed "From" address and with various possible message subjects and bodies and an attachment that contains the worm.  The attachment arrives in the form of a .zip file that contains an executable file.  In order to be infected, users must manually extract the executable from the .zip file and run the attachment.

 

For more information about the worm, including downloadable removal tools, please go to:

 

Symantec: http://www.symantec.com/avcenter/venc/data/[EMAIL PROTECTED]

 

McAfee: http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=137072

 

 

Mike Buras
Network Systems Administrator

Central Texas Library System
1005 West 41st Street
Austin, Texas 78756
(512) 583-0704, ext. 15

[EMAIL PROTECTED]