Welcome to the Virus Encyclopedia of Panda Security.
|Effects: ||It does not have any destructive effects. It spreads via e-mail.|
|Detection updated on:||March 8, 2004|
|Yes, using TruPrevent Technologies
Sober.D is a worm without destructive effects that spreads via e-mail in a message written in English or in German, depending on the mail domain extension of the user's address.
Sober.D searches for e-mail addresses in files with several especific extensions, and then sends itself out to all the addresses it has gathered, using its own SMTP engine.
Sober.D is easy to recognize once it is run, as it displays the following messages on screen:
If the computer is not infected yet, Sober.D displays the following message:
where %file% is the name of the file that has been run.
However, if the computer is currently affected, it shows the following message on screen: