Sober for 10 days.

Our friendly mail servers have had a busy 10 days coping with Worm.Sober.U (as known by ClamAV) and W32.Sober.X (as known by Symantec).

Since we saw our first instance of the worm on Nov 21 at 15:23:15, we’ve turned away 47,277 individual mails to 1,163,846 addressees (24.62 addresses for the average email).

According to this story in The Register, Sober accounts for 1 in 13 emails sent. Our experience is that it’s much, much higher.