W32/Sober.S@mm , Sober.N, Sober.O and Sober.P Warning

>> Listen to this Article or Add to Podcast

Title
=====
ITsafe Bulletin 2005/04

What is it?
===========
"W32/Sober.S@mm" is a mass-mailing worm that sends itself in an email. It is also called "Sober.N", "Sober.O" and "Sober.P"

What does it affect?
====================
Most computers that use Microsoft Windows

What does it do?
================
The worm will arrive by email, and will have a subject line in English or German with a ZIP file attachment, claiming to be from the soccer organization FIFA. The worm will be triggered, and spread to others in your address book, if you open the attachment.

How do I protect myself?
========================
As always, exercise care when opening attachments to email messages, as detailed at http://www.itsafe.gov.uk/library/explain/attachments.html.

How do I fix it?
================
Updates to Anti Virus Software signatures are available from most major suppliers.

Notes
=====
1. ITsafe Bulletins are issued by e-mail when significant risks have been identified that are likely to affect the majority of ITsafe users.
2. As our advice is that you should not click on URLs ("links") in any e-mail, we actually recommend you follow good practice, and type in the website name yourself in the box at the top of your browser window to see our detailed advice, rather than clicking on any links.

ITsafe Team - Making IT safe for You
The UK Alerting and Advisory Service for Information and Communications Technologies (ICT) Security

Reference Material:
http://www.itsafe.gov.uk