] Romanian researchers claim to have discovered a variant
] of the Sobig.F virus that looks to mail and domain name
] servers at Time Warner Telecom for information about how
] to modify its behavior.

According to this, the new virus may be able to receive program updates by performing certain DNS queries or SMTP sessions to compromised servers.

New Sobig Variant May Be Circulating