Skip to content

J-Security Center

Latest Attack Object Updates
  • IDP Daily Update #1203
    posted: 07/02/08
  • NSM Daily Update #1203
    posted: 07/02/08
  • Deep Inspection 5.3r5 and above, 5.4, 6.0 #1203
    posted: 07/02/08
  • Deep Inspection 5.1, 5.2, 5.3r4 and below #1201
    posted: 07/02/08
  • Deep Inspection 5.0 #1132
    posted: 04/01/08
  • Antivirus
    posted: 07/01/08

Email-Worm.Win32.Sober.p


03 May 2005 14:42:00 +0300

Sober.p, one of the most recent versions of the email worm Sober, is currently spreading actively in some parts of the world, causing epidemics and outbreaks. Sober.p differs very little from previous versions. It spreads as an attachment to infected messages. A range of messages and attachment names in both English and German are used.

Kaspersky Lab virus analysts detected the first example of Sober.p on the evening of 2nd May. According to mail server data, Sober.p is currently the malicious program most prevalent in mail traffic.

Sober.p has not yet caused a global epidemic, and the threat it represents varies according to geographical region. In Holland, Germany, Hungary and many other Western European countries Sober.p has already surpassed all records set by other worms which caused outbreaks in 2005. However, so far Kaspersky Lab has received very few messages from Russian and Asian users about this worm.

Kaspersky Anti-Virus databases have already been updated with protection against Sober.p. As always, users are recommended to download the latest updates, and to update antivirus solutions on a regular basis.

A detailed description of Sober.p is available in the Kaspersky Virus Encyclopaedia.