Active Scan. Scan your PC free
Download Cloud Antivirus Gratis

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.


Threat LevelHigh threatDamageSevereDistributionNot widespread
Common name:Sober.V
Technical name:W32/Sober.V.worm!CME-456
Threat level:Medium
Alias:CME-456, Sober.P,, Email-Worm.Win32.Sober.p, W32.Sober.O@mm, W32/Sober.gen@MM, W32/Sober.p@MM , W32/Sober-N

It spreads via email in a message written in English or German.

Affected platforms:

Windows 2003/XP/2000/NT/ME/98/95

First detected on:May 2, 2005
Detection updated on:Dec. 14, 2007
Proactive protection:
Yes, using TruPrevent Technologies

Brief Description 


Sober.V is a worm that spreads via email, in a message written in English or German.

The email message will be written in German only if the mail domain extension is one of the following: de (Germany), ch (Switzerland), at (Austria) or li (Liechtenstein).


Click on the picture below to see a full-size diagram of the characteristics of Sober.V and how to protect your computer against them.

Click on the picture to view a full-size diagram

Visible Symptoms 


Sober.V is easy to recognize once it has affected the computer, as it displays a fake WinZip SelfExtractor error when it is run:

Error:CRC not completed