FYI: New virus poses as "Microsoft patch" to the MyDoom Virus - sober.d/mm

[guyver01]

W32/Sober.d@MM is a Medium Risk mass-mailing worm posing as an official Microsoft patch for the Mydoom virus. Watch for telltale subject lines in English or German with the text "Microsoft Alarm: Please Read!" or "Microsoft Alarm: Bitte Lessen!" Note: Microsoft does not email patches.

The worm arrives as an executable attachment or inside a Zip archive. When run, it displays fake Windows warnings and error alerts. Using its own SMTP engine, W32/Sober.d@MM also mails itself to email addresses found on the infected computer.


http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=101081
http://www.sarc.com/avcenter/venc/data/w32.sober.d@mm.html

 

[guyver01]

bump once

 

[jfall]

damn, the virus writers must be busy these days