Welcome to the Virus Encyclopedia of Panda Security.
It spreads via e-mail in a message written in English or German.
|First detected on:||Feb. 21, 2005|
|Detection updated on:||Feb. 23, 2005|
|Yes, using TruPrevent Technologies
Sober.M is a worm that spreads via e-mail, in a message written in English or German.
The e-mail message will be written in German only if the mail domain extension is one of the following: de (Germany), ch (Switzerland), at (Austria) or li (Liechtenstein).
Sober.M is easy to recognize once it has affected the computer, as it opens Notepad and displays the following text when it is run:
Additionally, it also displays the following fake error on screen when it is run: