W32.Bobax.A aka Bobax:spreads the same way
as W32.Sasser. Uses a buffer overrun in the Local
Security Authority Subsystem Service (LSASS). Targets
only WIN XP operating system.
W32.Sober.G aka Sober .G:new variant of
W32.Sober aka Sober. Uses its own SMTP engine to
spread itself. Email sender address is spoofed,
the subject varies, and it will be in either English
or German.
W32.Sasser.A aka Sasser:spreads caused by
a buffer overrun in the Local Security Authority
Subsystem Service (LSASS) vulnerability.
Check out the Latest
Worms (MS) page.