How Sober activates
First Sober variant was found in October 2003. Since then, we've found over 20 different variants.
Most of these variants contain a routine that activates the virus at later date. After this the virus will try to periodically download and run a file from several websites. This is the way most new Sober variants are distributed: the author uploads a new version and all the infected machines will suddenly get infected with the new variant.
[ Read more ]