Subscriber Advisory on Sober.z Virus
November 23, 2005

A new computer virus called Sober.z was discovered to have been
infecting computers worldwide. It has been found spreading late since Nov 16, 2005.

This memory-resident worm propagates by attaching a copy of itself to an
email message, which it sends to target recipients using its own Simple Mail Transfer Protocol (SMTP) engine. Since its email propagation does not require any user intervention, affected users are often unaware that this worm is sending out email messages that contain any of the following attachments:

• mailtext.zip
• mail.zip
• reg_pass.zip
• mail.zip
• reg_pass-data.zip
• question_list.zip
• list.zip
• downloadm
• mail_body.zip

Please be informed that Mozcom never includes attachments in our email
advisories. We urge you to check your computers to determine if you have been infected by this worm, and most of all avoid opening suspicious email attachments. Also, update your computer virus protection.

Sober Removal Tool : http://www.symantec.com/avcenter/venc/data/w32.sober.removal.tool.html Mytob Removal Tool : http://www.symantec.com/avcenter/venc/data/ w32.mytob.ar@mm.removal.tool.html

Should you need further technical assistance, contact Mozcom's Customer Service Department at 848-2606 (Manila), 253-0013 (Cebu), 221-1462 (Davao), 443-9502 (Baguio), or your local Mozcom franchisee in your area.