New Mass Mailing Worm

Campus email users have reported the recent receipt of messages infected with a W32.Sober virus variant. This virus is a mass-mailing worm that sends itself as an email attachment to addresses gathered from a compromised computer. The email may be in either English or German. If the infected email is in English, the originator address is forged to reflect an official sounding account, such as Webmaster, Hostmaster or Postmaster. Please DO NOT open the infected email file attachment and, instead, delete the email message.

More information can be found at: http://securityresponse.symantec.com/avcenter/venc/data/w32.sober.o@mm.html http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=133409

A tool to remove a W32.Sober virus infection: http://vil.nai.com/vil/stinger/