New email worm?

[joea64]

I haven't seen anything about this anywhere else yet, so I decided to toss this out and see if anyone else had been experiencing the same thing. Since yesterday, at least two of my mailboxes have been clogged with mails with German titles. AVG doesn't seem to find any viruses in any of these messages, but they all seem to have the same half-dozen or so titles, either in the German language or in English with reference to German topics. So far, I haven't seen any that are addressed directly to me, which is another thing that makes me think this might be a new worm. Any further information?

-Joe-

[Sylvander]

I've been recieving a few of these, but just tick them for deletion [like all the other junk] whilst still on the server using "Mailwasher".

[Budfred]

More likely it is just a German SPAMmer... I use MailWasher and delete that kind of stuff in bulk, so they never get a chance to run any malicious garbage on my system... Do you know how big the emails are?? If they are more than a couple of K, they are more likely to contain malicious code...

[PrntRhd]

Actually it may be the new version of the Sober.Q worm, this one sends German propoganda messages from PCs it infects. "You will pay dearly for bombing Dresden".
http://www.sarc.com/avcenter/venc/data/w32.sober.o@mm.html

[joea64]

Actually it may be the new version of the Sober.Q worm, this one sends German propoganda messages from PCs it infects. "You will pay dearly for bombing Dresden".
http://www.sarc.com/avcenter/venc/data/w32.sober.o@mm.html

I think that's it! Many of the message titles do mention the 1945 Dresden bombing.

-Joe-

[Cavalier90]

Having been receiving many infected e-mails containing I-worm/Sober p, that stopped as abruptly as they started, I too started receiving loads of German e-mails yesterday. They just get junked without opening. They do not seem to be carrying a payload but I'm still not going to open them (file sizes are 0.6, or 0.7 kb).