Bart Silverstrim wrote: > Are there any analysis papers out on sober.p yet? And can anyone else > corroborate the theory I have, or am I totally off-base here? I'm > still trying to figure it out from what I can piece together between > phone calls for other tasks here :-)
If I remember correctly, a sideline of sober.p is to install sober.q on the infected machine, which then spews these messages. Matt _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
