The Channel logo


By | John Leyden 22nd November 2005 17:05

FBI warns over Sober worm

Your IP address hasn't been logged, say Feds

The latest variants of the prolific Sober worm series pose as messages from either FBI or CIA investigators in an attempt to dupe Windoze users into opening infectious attachments. The trick was last used in February.

On Tuesday, variants of the worm had accounted for over 65 per cent of all viruses reported to UK-based security firm Sophos, making it the most prevalent virus currently spreading across the world. The FBI is so concerned about the messages that it has issued a warning on its website. The FBI has urged users who receive the viral emails to report them to the Internet Crime Complaint Centre (

If the attached "Zip file" is run, the worm will scour an infected user's hard drive for other email addresses, in its hunt for fresh victims. Standard defensive precautions apply: avoid opening unsolicited attachments, even when they appear to come from people you trust; update AV tools to detect the worm. If you think your PCs might be infected by Sobber or another virus then our guide to cleaning up PCs may come in handy. ®

alert Send corrections


Frank Jennings

What do you do? Use manual typwriters or live in a Scottish croft? Our man advises
A rusty petrol pump at an abandoned gas station. Pic by Silvia B. Jakiello via shutterstock

Trevor Pott

Among other things, Active Directory needs an overhaul
Baby looks taken aback/shocked/affronted. Photo by Shutterstock

Kat Hall

Plans for 2 million FTTP connections in next four years 'not enough'
Microsoft CEO Satya Nadella


League of gentlemen poster - Tubbs and Edward at the local shop. Copyright BBC
One reselling man tells his tale of woe