W32/Sober.J@mm

W32/Sober.J@mm	Destructivity: Spreading: Overall risk:

• Detected by virus detection files published: 1/31/2005	• Type: Worm
• Virus characteristics first published: 1/31/2005	• Spreading mechanism: Email
• Virus characteristics latest update: 10/30/2007	• Overall risk: Low
• Infection type: Microsoft Windows 95/98/98 SE/ME/NT 4/2000/XP/2003/Vista

When Sober.J is first run it will launch notepad to display the following (or similar) text:

---Mail Text

------------

Hey,

---------------------- Error in %WinZip base Modul% 0x9F -------------------

hv8hKpAAJQAUADWWQABsloM9PAeQEgoFlNk0TbcMAxop7HiVG6w
ZZITXLjMnR5mz3bICoTcDCqFH

2Fw2XfcJyCPPA91clx6YWTZNsyo2jxuZJ8mmaQZnc/8Lmk3TNM0fY
m6Ap7qQZdM0yNRgm2zMbZpm

.....

(Continues for several lines)

# - A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z

VIRUSfighter