Welcome to the Virus Encyclopedia of Panda Security.
|Alias:||W32/Sober@mm, Win32.HLLM.Odin, Win32/Sober.A|
|Effects: ||It does not have destructive effects. It spreads via e-mail.|
|Detection updated on:||Dec. 18, 2003|
|Yes, using TruPrevent Technologies
Sober.A is a worm without destructive effects that spreads via e-mail in a message written in English or German.
Sober.A creates two copies of itself that go memory resident and check if both are currently running. If one of the processes is ended or one of the files is deleted, the other creates it again.
Sober.A is easy to recognize once it has reached the computer, as it displays a fake error message on screen: