Home Malware Programs Worms WORM_SOBER.AC

WORM_SOBER.AC

Posted: February 16, 2011

First identified as a threat in late 2005, WORM_SOBER.AC is a worm that spreads through email attachments. WORM_SOBER.AC gathers email addresses and other information without permission, uses up significant resources on your computer, and may result in noticeable system instability. WORM_SOBER.AC is only classified as a medium threat, but users shouldn't hesitate to exterminate it rapidly, since WORM_SOBER.AC can propagate itself extremely quickly with little warning.

WORM_SOBER.AC is an Old Threat that Remains Threatening Today

Although over half a decade's passed since WORM_SOBER.AC was identified as a danger to computers, WORM_SOBER.AC is still loose in the Internet, spreading itself through email. WORM_SOBER.AC gathers these targets by looking for files with extensions indicative of text content, which WORM_SOBER.AC then sorts through for potential addresses. Since these files are related to the websites you visit, it pays to be cautious about what sites you go to if you suspect a WORM_SOBER.AC infection.

When last reported, the WORM_SOBER.AC worm had a notable presence in the countries of Germany, Japan, Australia and the United States. Exercising caution when interacting with email messages from these countries can help you avoid a possible infection. A more notable indication of a possibly infected email is the use of German in the text content of the message. WORM_SOBER.AC will include itself as an obvious attachment, and if not downloaded or run it poses no threat to the recipient.

How WORM_SOBER.AC Worm Puts You at Risk

The initial execution of WORM_SOBER.AC will create an error message, followed by the development of some files that assist in WORM_SOBER.AC's propagation. Although WORM_SOBER.AC may act subtly and not give overt indications of being on your computer, it does have a considerable drawback to the host system that encourages WORM_SOBER.AC 's speedy removal.

The various files and processes used by WORM_SOBER.AC are not directly controllable or able to be 'turned off,' and while constantly gathering information and mailing more copies of WORM_SOBER.AC out, they will use up a large amount of system memory. The amount of RAM used can even cripple some computers entirely due to the sheer broadness of WORM_SOBER.AC infection tactics.

This makes WORM_SOBER.AC to be very noticeable, since eventually it will seriously slow down your computer. Deleting WORM_SOBER.AC is the only cure that will allow you to regain the memory it steals for its criminal processes. Automated and updated security software will be best for this, since WORM_SOBER.AC may conceal itself in ways that make it difficult to expunge completely by hand.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 bbvmwxxf.hml
    2 gdfjgthv.cvq
    3 lageinf.lin
    4 nonrunso.ber
    5 rubezahl.rub
    6 runstop.rst
    7 services.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run_WinCheck = %windir%\ConnectionStatus\Microsoft\services.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnceWinCheck = %windir%\ConnectionStatus\Microsoft\services.exeHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunWinCheck = %windir%\ConnectionStatus\Microsoft\services.exe
Loading...