ChangeLog:
Changes are listed in chronological order with the latest changes first.
2005-12-13 23:34	Description was changed. New: "W32.Sober.X@mm is a mass-mailing worm that uses its own SMTP engine to spread and lowers security settings. It sends itself as an email attachment to addresses gathered from the compromised computer. The email may be in either English or German." Old: "W32.Sober.X@mm is a mass-mailing worm that uses its own SMTP engine to spread and lowers security settings. It sends itself as an email attachment to addresses gathered from the compromised computer. The email may be in either English or German. Note: Symantec products that support the Worm Blocking functionality automatically detect this threat as it attempts to spread. "
2005-11-24 23:50	Description was changed. New: "W32.Sober.X@mm is a mass-mailing worm that uses its own SMTP engine to spread and lowers security settings. It sends itself as an email attachment to addresses gathered from the compromised computer. The email may be in either English or German. Note: Symantec products that support the Worm Blocking functionality automatically detect this threat as it attempts to spread. " Old: "W32.Sober.X@mm is a mass-mailing worm that uses its own SMTP engine to spread and lowers security settings. It sends itself as an email attachment to addresses gathered from the compromised computer. The email may be in either English or German. "
2005-11-23 23:50	Description was changed. New: "W32.Sober.X@mm is a mass-mailing worm that uses its own SMTP engine to spread and lowers security settings. It sends itself as an email attachment to addresses gathered from the compromised computer. The email may be in either English or German. " Old: "W32.Sober.X@mm is a mass-mailing worm that uses its own SMTP engine to spread and lowers security settings. It sends itself as an email attachment to addresses gathered from the compromised computer. The email may be in either English or German."
2005-11-23 23:50	Updated information about removal tool/instructions.
2005-11-22 23:50	Description was changed. New: "W32.Sober.X@mm is a mass-mailing worm that uses its own SMTP engine to spread and lowers security settings. It sends itself as an email attachment to addresses gathered from the compromised computer. The email may be in either English or German." Old: "W32.Sober.X@mm is a mass-mailing worm that uses its own SMTP engine to spread. It sends itself as an email attachment to addresses gathered from the compromised computer. The email may be in either English or German."
2005-11-22 15:44	Severity was raised from 2/5 to 3/5.

ChangeLog:
Changes are listed in chronological order with the latest changes first.
2005-11-23 11:43	Severity was raised from 2/5 to 5/5.

ChangeLog:
Changes are listed in chronological order with the latest changes first.
2005-11-23 11:31	Severity was raised from 2/3 to 3/3.
2005-11-22 11:51	Severity was raised from N/A to 2/3.
2005-11-22 11:41	Severity was decreased from 2/3 to N/A.
2005-11-22 11:41	Severity was raised from N/A to 2/3.

ChangeLog:
Changes are listed in chronological order with the latest changes first.
2005-11-24 19:42	Description was changed. New: "The risk assessment of this threat has been upgraded to Medium due to the amount of spam emails being sent which include copies of this virus. Mcafee customers have been protected since the 4629 dat files released on November 16th , which detected th..." Old: "The risk assessment of this threat has been upgraded to Medium due to the amount of spam being seen from this variant, Mcafee customers have been protected since the 4629 dat files released on November 16th , which detected this as W32/Sober.gen@MM. ..."
2005-11-23 22:47	Updated information about removal tool/instructions.
2005-11-23 01:17	Severity was raised from 2/7 to 4/7.
2005-11-23 01:17	Description was changed. New: "The risk assessment of this threat has been upgraded to Medium due to the amount of spam being seen from this variant, Mcafee customers have been protected since the 4629 dat files released on November 16th , which detected this as W32/Sober.gen@MM. ..." Old: "This threat is proactively detected as W32/Sober.gen@MM with the 4629 DATs or greater (release date Nov 16th 2005). Specific named detection as W32/Sober@MM!M681 (to reflect the assigned CME ID number) will be added to the 4635 DATs."