Sober variant set to cause trouble
Antivirus firm Network Associates today raised to 'medium' its risk assessment of the recently discovered Windows worm Sober.f.
Sober.f is a prolific worm that spreads via email, sending itself to addresses found on the victim's machine.
The worm has many of the same functionalities as its predecessors: it comes in the form of an attachment and contains a varying filename.
Users need to manually run the attachment in order to be infected.
After executing, Sober.f emails itself out as an attachment with a random filename and installs itself to the victim machine's system directory using a filename constructed from a string pool carried within the worm.
