Tipstaff

InfoWorld:

"A new version of the Sober worm wriggled out of its hole early on Monday and set about quickly attacking computers in Europe and the U.S., a security services company said. The worm is a mass-mailer, meaning it spreads itself via e-mail using contacts listed in the address books of computers it infects.
W32.Sober-K-mm spreads itself as an email attachment and creates random subject lines and body texts in either English or German, depending on the e-mail addresses it gathers. Subject lines observed so far include "Alert! New Sober worm," "Paris Hilton Sex Videos," "You visit illegal websites" and "Your new Password," according to MessageLabs, in Gloucester, England.

When a user opens the attachment the worm creates several executable files with the names csrss.exe, winlogon.exe and smss.exe. It then modifies the registry key Software\Microsoft\Windows\CurrentVersion\Run so that the files execute on startup."


You can check out the rest of the article on InfoWorld HERE .


Ones things for sure, this means I'll be making some good money in the next couple of weeks cleaning customers machines of this baby.

__________________

MIG-31

Thanks again for the submit.I have also posted this to the front page news Here.

__________________