SOBER-A WORM

The Sober-A Worm spreads via mass mailing. It is 66,186 bytes long.


REMOVAL INSTRUCTIONS:

• Run REGEDIT and delete the values:
  • "syspath"=%system%\drv.exe
    in registry key:
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  • "syspath"=%system%\drv.exe
    in registry key:
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
• Run Vbuster.Exe and use it to delete all occurances of the worm

Return Home