Win32.Sober.W

Tourangh · Nov 24, 2005

W32.Sober.X@mm is a mass-mailing worm that uses its own SMTP engine to spread and lowers security settings. It sends itself as an email attachment to addresses gathered from the compromised computer. The email may be in either English or German.

THats all norton tells me but wont get rid of it. I would install some other av but it is not my pc so i cant. Any tools to get rid of it quickly?

chaslang · Nov 24, 2005

Well if you cannot install anything, you will not be able to get rid of it. I know the latest McAfee updates fix this.

All I can recommend is following our standard cleaning process given below. But you may want to give this a run first as it is a stand alone application needing no installation. It may or may not fix the problem: McAfee AVERT Stinger 2.5.9 I know it does fix some forms of Sober.

If that does not help, continue to below.

Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

Please follow the steps below:

- Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis

.

Log in or Sign up

Win32.Sober.W

Tourangh Master Sergeant

chaslang MajorGeeks Admin - Master Malware Expert Staff Member