• W32.Sober.L[M] aka Sober.L[M]:uses its own SMTP engine. Spreads by sending itself as email attachment to addresses collected on the infected computer. Email subject varies and will be in English or German.
  
  The email has the following characteristics:
  Subject: "Ich habe Ihre E-Mail bekommen!". or
  Subject: "Your Password & Account number".
  Attachment name: *.zip

  Check out the Latest Worms (MS) page.

W32.Sober Family