VIRUS ADVISORY: W32/Sober.r@MM

((((((((((((((((((((((((((( McAfee )))))))))))))))))))))))))

[This message is brought to you as a subscriber to the
McAfee Dispatch. To unsubscribe, please follow the
instructions at the bottom of this email.]

============================================================
VIRUS ADVISORY: W32/Sober.r@MM - Medium Risk
------------------------------------------------------------
DAT Required: DAT 4598
------------------------------------------------------------
Learn more about W32/Sober.r@MM here:
http://us.mcafee.com/root/campaign.asp?cid=16001
------------------------------------------------------------
FreeScan checks for W32/Sober.r@MM
Scan now:
http://us.mcafee.com/root/campaign.asp?cid=14462
============================================================

What is it?

The 18th variant of the first Sober virus, W32/Sober.r@MM
is a mass-mailing worm hiding inside a .ZIP attachment.
When run, the worm displays fake error messages, infects
the host computer and sends itself to stolen email
addresses. Messages may come in German or English.

What should I look for?

FROM: Varies
SUBJECT: English: Your new Password. German: Fwd:
Klassentreffen
BODY: English: Your password was successfully changed!
Please see the attached file for detailed information.
German: ich hoffe jetzt mal das ich endlich die richtige
person erwischt habe! ich habe jedenfalls mal unser
klassenfoto von damals mit angehngt.
ATTACHMENT. KlassenFoto.zip, pword_change.zip

How do I know if I've been infected?

Fake error messages displayed. Outgoing messages as noted
above. Note: Receiving an email alert stating that the
virus came from your email address is not necessarily an
indication you are infected. Mass-mailing viruses often
forge (or "spoof") the from address.

What can I do?

Besides keeping your anti-virus protection current,
fortify your PC security by installing McAfee Personal
Firewall Plus -- recommended against threats like
W32/Sober.r@MM that need Internet access to spread.

http://us.mcafee.com/root/campaign.asp?cid=11276

----------------------------------------------------------
Install the Latest Protection
----------------------------------------------------------

Current VirusScan Subscribers
1. Connect to the Internet.
2. Right-click the red McAfee icon in your system tray.
3. Click Updates.
Note: We recommend setting your service to Automatic Update.

VirusScan 2005/9.x Retail Owners
o Renew your DAT subscription.
http://us.mcafee.com/root/campaign.asp?cid=15998

VirusScan 2004/8.x or prior Retail Owners
o Visit our Upgrade Center to order new VirusScan 2005.
http://us.mcafee.com/root/campaign.asp?cid=15999

New Users
o Download new McAfee VirusScan now for year-round PC
protection from the latest viruses and worms.
http://us.mcafee.com/root/campaign.asp?cid=11157

o Or try it free for 30 days
http://us.mcafee.com/root/campaign.asp?cid=11158

McAfee Security Special
o Is spyware on your PC? McAfee AntiSpyware helps keep you
safe from identity theft. Only $19.99 after $10 rebate.
http://us.mcafee.com/root/campaign.asp?cid=16002

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[ You are currently subscribed as: security.world@gmail.com ]

Please feel free to forward this email to any interested
friends, family and associates.

Please do not send a reply to this email. For support-related
questions, go here:
==> http://www.mcafeehelp.com/

Subscribe: If you received this message from a friend and
would like to subscribe to eSecurity News, virus alerts and
special offers, go here.
==> http://dispatch.mcafee.com/us/sub.asp

Unsubscribe:
==> http://us.mcafee.com/root/campaign.asp?cid=9824

View our privacy policy.
==> http://us.mcafee.com/root/campaign.asp?cid=8207

McAfee VirusScan 2006 is PCMAG.COM Editors' Choice for
Security Software.

McAfee and VirusScan are registered trademarks or trademarks
of McAfee, Inc. and/or its affiliates in the US and/or other
countries. All other registered and unregistered trademarks
herein are the sole property of their respective owners.

3965 Freedom Circle, Santa Clara, CA 95054, (408) 992-8599
(c) 2005, McAfee, Inc. All Rights Reserved.