Home Malware Programs Worms Sober.x

Sober.x

Posted: March 28, 2006

Sober.x is an Internet worm, which propagates by e-mail through messages with attached Zip archives containing copies of the spyware.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 csrss.exe
    2 file-packed_datainfo.exe
    3 services.exe
    4 smss.exe
    5 socket1.ifo

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun\_windowsHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun\_windows
Loading...