Sober.c more toxic than first thought
The McAfee Anti-Virus Emergency Response Team (Avert) has today increased its original low-risk threat assessment of the 'moderately prevalent' Sober.c worm to medium risk status.
Sober.c contains its own SMTP engine and targets email addresses that it harvests from the victim machine virus.
Once activated, it emails itself to the user's Microsoft Outlook address book with outgoing messages constructed using its SMTP engine. The messages may be written in either English or German, and the attachment filename can vary.