I've seen a graph of this on another mail server: Sober actually morphed
around January 4-6 and changed patterns. It's still not clear exactly what
all has been going on, but one consistent pattern is ceasing propagation (at
least temporarily).
http://www.f-secure.com/weblog/archives/archive-122005.html
"This variant is programmed to activate on January 6th, 2006. After this
date all the infected machines will regularily try to download and run a
file from a website, forever."
----- Original Message -----
From: "J Porter" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Friday, January 06, 2006 10:53 PM
Subject: Re: [Declude.Virus] Sober.z
Yep... I upgraded to FProt 3.16e and noticed the slowdown. I thought it
was a problem with that version, so I upgraded to the 3.16f which was
released today. Still no Sober viruses caught.
I'm still wondering if I should go back to 3.16d. Anyone seeing Sober
caught with these last 2 updates of F-Prot??
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
