Fact Check

Sober.C Virus

Information about the 'Sober.C' virus.

Published Nov. 26, 2003


Virus name:   Sober.C

Status:   Real.

Example:   [Collected on the Internet, 2003]

From: james2003@hotmail.com
Subject: Re[2]: Mary

Hello my dear Mary,

I have been thinking about you all night. I would like to apologize for the other night when we made beautiful love and did not use condoms. I know this was a mistake and I beg you to forgive me.

I miss you more than anything, please call me Mary, I need you. Do you remember when we were having wild sex in my house? I remember it all like it was only yesterday. You said that the pictures would not come out good, but you were very wrong, they are great. I didn't want to show you the pictures at first, but now I think it's time for you to see them. Please look in the attachment and you will see what I mean.

I love you with all my heart, James

Attachment: Private.zip

Origins:   There's nothing like a little prurient tease to lure unsuspecting PC users into executing viruses, but those who fall for this one won't even get the promised pictures of 'Mary' (girlfriend of 'James') in return. The attachment that comes with this message (private.zip) holds not sexy snapshots but Backdoor.Sysbug, a trojan horse that opens TCP port 5555 and waits for commands from the trojan's author.

Backdoor.Sysbug affects systems running versions of the Microsoft Windows operating system, and it should be easy to remove from infected systems by using any up-to-date virus protection program.

Additional Information:

    Backdoor.Sysbug Backdoor.Sysbug (Symantec Security Response)

Last updated:   29 January 2008

David Mikkelson founded the site now known as snopes.com back in 1994.