Advisory

AVERT is raising the risk assessment of W32/Sober@MM!M681 to Medium due to the amount of spam being seen from this variant. McAfee customers have been protected since the 4629 dat files released on November 16th, which detected this as W32/Sober.gen@MM.

Read About It

Information about W32/Sober@MM!M681 is located on VIL at: http://vil.nai.com/vil/content/v_137072.htm

Detection

W32/Sober@MM!M681 was first discovered on 11/22/2005 and detection has been proactively available since the 4629 dat files, released on November 16th.

To stay updated and protected download the latest dat files from http://www.mcafeesecurity.com/us/downloads/default.asp

If you suspect you have W32/Sober@MM!M681, please submit a sample to http://www.webimmune.net.

Risk Assessment Definition

For further information on the Risk Assessment and AVERT Recommended Actions please see:

http://www.mcafeesecurity.com/us/security/resources/risk_assessment.htm