New Sober yet again

[homerzeppelin]

The new sober appears to be pretty bad down in the west cost of florida near tampa.  We've had media attention on it and my company appears to be infected.  Symantec is calling it Trojan.Ascetic.C (with lots of other names, W32.Sober.P / O / Q / U ect).  (There is no attachment to the emails.)

Unfortunatly it isn't helping with the problem.  We have various people on our network receaving the german emails (you are made slave - was the translation of one of them...fun).  One of the workers email appears to be sending the mails out, since he keeps receaving undelivered mail reports that are the new sober emails.  The whole system seems infected since some of the mails come from made up emails from our domain.

Its strange though since none of the files that symantic claims sober adds are on the computers that appear infected or on the company/mail server.

[MFB]

Hmm, well as you know, it's quite common to discover new virus like Sober and Sasser Worms these days cause people who made these viruses has no life.  But to be honest, if it wasn't for them making these viruses, avast! wouldn't be much existed.   

[electronikk]

I don't get it. Has Sober-Q become part of the vdf or not? (Maybe another name was used?) And if not -why not? I mean this thing is "in the wildest"! This whole topic doesn't cast any good light on alwil. Comments?   

[igor]

Of course it has - it's called Win32:Sober-O [Wrm].

[DavidR]

I don't get it. Has Sober-Q become part of the vdf or not? (Maybe another name was used?) And if not -why not? I mean this thing is "in the wildest"! This whole topic doesn't cast any good light on alwil. Comments?

I think that you should bookmark this link for the future - http://www.virusbtn.com/resources/vgrep/index.xml it will help with aliases of viruses, since there is no common standard/convention for virus names. Unfortunately there is a delay from a new virus being detected to being included in this database.

[electronikk]

Thanks for the replies! (Wasn't able to post in a while.) Sorry, I was a little confused by the different names. I'd wish there were some kind of unified naming rules. That would probably help both the consumers and the programmers of antivirus software.