W32/Sober.A@mm appeared 24 October, 2003. It arrives in a fake warning message about a new worm. One interesting feature is that if the domain of the recipient's email address is '.de' (Germany), '.li' (Liechtenstein), '.at' (Austria) or '.ch' (Switzerland), the message is in German, otherwise, it uses English.
W32/Mimail.C@mm first appeared on 31st of October, 2003. The worm spreads in e-mails as an attachment called PHOTOS.JPG.EXE, which is actually a ZIP archive that contains the worm's executable. The worm will try to perform a DoS (Denial of Service) attack against certain sites and to steal information from the infected computer.