FBI / CIA Emails

[LER]

I got the following from McAfee:

Advisory
AVERT is raising the risk assessment of W32/Sober@MM!M681 to Medium due to the amount of spam being seen from this variant. McAfee customers have been protected since the 4629 dat files released on November 16th, which detected this as W32/Sober.gen@MM.

Read About It
Information about W32/Sober@MM!M681 is located on VIL at: http://vil.nai.com/vil/content/v_137072.htm

Detection
W32/Sober@MM!M681 was first discovered on 11/22/2005 and detection has been proactively available since the 4629 dat files, released on November 16th.

To stay updated and protected download the latest dat files from http://www.mcafeesecurity.com/us/downloads/default.asp

If you suspect you have W32/Sober@MM!M681, please submit a sample to http://www.webimmune.net .

Risk Assessment Definition
For further information on the Risk Assessment and AVERT Recommended Actions please see:
http://www.mcafeesecurity.com/us/security/resources/risk_assessment.htm

Best Regards,

McAfee AVERT - Anti Virus and Vulnerability Research, Analysis, and
Solutions visit us at www.avertlabs.com

 

[slacker9876]

Man it is nice to be a linux user in the crowd!!! Miss our WinBloze machines at the office, probably becuase everything but ports 80:337:448 are sealed like a nun. Sorry fellas, bummer to get hit with that junk!

 

[Scott Greczkowski]

http://news.com.com/Sober+worm+offshoot+trades+on+Paris+Hilton%2C+FBI/2100-7349_3-5967601.html?tag=nefd.top

 

[voomvoom]

Thanks Everyone

The worm is called W32.Sober.X@mm [Symantec]
Also known as: CME-681, WORM_SOBER.AG [Trend Micro], W32/Sober-{X, Z} [Sophos], Win32.Sober.W [Computer Associates], Sober.Y [F-Secure], W32/Sober@MM!M681 [McAfee]

It basically sends itself (as an attachment) to all email addresses it can find on your computer

Read here for details:
http://www.symantec.com/avcenter/venc/data/w32.sober.x@mm.html

Thanks for everyones help, especially Ilya. I went to this site and followed instructions and it worked fine. Problem gone.

Al

 

[Ilya]

You are welcome. Stay safe!

 

[Purogamer]

Hey guys, i got this email from a prince, and he said if i send him just $2,700 US dollars, and my bank account numbers, his business partner will wire my share of $14,768,450.14 within 5 days of receiving my information.

Does this sound good to you guys?? To make sure I know it's not a scam, he gave me this emergency phone number should anything go wrong. The number is 1-800-44-STERN. So it's clearly not a scam, I should go ahead...right!??

 

[Ilya]

Hey guys, i got this email from a prince, and he said if i send him just $2,700 US dollars, and my bank account numbers, his business partner will wire my share of $14,768,450.14 within 5 days of receiving my information.

Does this sound good to you guys?? To make sure I know it's not a scam, he gave me this emergency phone number should anything go wrong. The number is 1-800-44-STERN. So it's clearly not a scam, I should go ahead...right!??

Sure thing! Works every time!!! :haha