possible worm--help

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
I need a bit of help--I keep getting undeliverable mail returned from my
mailserver.  However, it is mail that I never sent.  It looks to be German
writing about the bombing of Dresden.  I think that this is probably a worm.
 I ran the symantic tool for W32.Sober.O@mm, but the removal program found
nothing.  Does anyone have any idea what this might be and how to remove it?

Re: possible worm--help

On Sat, 21 May 2005 15:42:38 GMT txs@bsd.net wrote:

Quoted text here. Click to load it
It's spam, relayed through one or more infected computers.  Your
address was inserted in the "From:" field by the spammer, probably to
mark his place.  It isn't a Trojan and there's not much you can do
about it except be patient while you are deleting the bounces.
Ernie B.

Communication:  The art of moving an idea from one mind to another,
hopefully without distortion.

Re: possible worm--help

Quoted text here. Click to load it
Its other people who are infected.


"Of all the things I've lost, I miss my mind the most." O.Osbourne.

Re: possible worm--help

On Sun, 22 May 2005, Conor wrote:

Quoted text here. Click to load it

Namely, former victims of Sober.P who have had their computers download
and "upgrade" to Sober.Q.  Virus info:

"F-Secure Computer Virus Information Pages: Sober.Q"

"F-Secure Computer Virus Information Pages: Sober.P"

In the news:

"IOL: Science & Tech: Early birds catch the Sober worm"

"PCWorld.com - Sober Worm Spawns German Spam"

"German spam has neo-Nazi links"

"I.T. Vibe - Sober-Q worm spams mail in English and German"
http://itvibe.com/news/3533 /

"New variant of the German Sober worm fills e-mail"
http://www.winantivirus.com/news/60b93157 /

"SmoothWall: Sober worm launches German political spam torrent"

">> consider moving away from Front Page...."
">To what? Any suggestions?"
"Naked bungee-jumping. It's less humiliating <g>"
             -- Matt Probert in alt.www.webmaster, March 20, 2005

Site Timeline