Welcome to the Virus Encyclopedia of Panda Security.
|Effects: ||It does not have any destructive effects. It spreads via e-mail.|
|Detection updated on:||April 19, 2005|
|Yes, using TruPrevent Technologies
Sober.C is a worm without destructive effects that spreads via e-mail in a message written in English or German.
Sober.C creates two copies of itself that go memory resident and check if both are currently running. If one of the processes is ended or one of the files is deleted, the other creates it again.
Sober.C is easy to recognize once it has reached the computer, as it displays a fake error message on screen:
where %file% is the name of the file that has been run, which carried the worm.