WORM_SOBER.AC
First identified as a threat in late 2005, WORM_SOBER.AC is a worm that spreads through email attachments. WORM_SOBER.AC gathers email addresses and other information without permission, uses up significant resources on your computer, and may result in noticeable system instability. WORM_SOBER.AC is only classified as a medium threat, but users shouldn't hesitate to exterminate it rapidly, since WORM_SOBER.AC can propagate itself extremely quickly with little warning.
WORM_SOBER.AC is an Old Threat that Remains Threatening Today
Although over half a decade's passed since WORM_SOBER.AC was identified as a danger to computers, WORM_SOBER.AC is still loose in the Internet, spreading itself through email. WORM_SOBER.AC gathers these targets by looking for files with extensions indicative of text content, which WORM_SOBER.AC then sorts through for potential addresses. Since these files are related to the websites you visit, it pays to be cautious about what sites you go to if you suspect a WORM_SOBER.AC infection.
When last reported, the WORM_SOBER.AC worm had a notable presence in the countries of Germany, Japan, Australia and the United States. Exercising caution when interacting with email messages from these countries can help you avoid a possible infection. A more notable indication of a possibly infected email is the use of German in the text content of the message. WORM_SOBER.AC will include itself as an obvious attachment, and if not downloaded or run it poses no threat to the recipient.
How WORM_SOBER.AC Worm Puts You at Risk
The initial execution of WORM_SOBER.AC will create an error message, followed by the development of some files that assist in WORM_SOBER.AC's propagation. Although WORM_SOBER.AC may act subtly and not give overt indications of being on your computer, it does have a considerable drawback to the host system that encourages WORM_SOBER.AC 's speedy removal.
The various files and processes used by WORM_SOBER.AC are not directly controllable or able to be 'turned off,' and while constantly gathering information and mailing more copies of WORM_SOBER.AC out, they will use up a large amount of system memory. The amount of RAM used can even cripple some computers entirely due to the sheer broadness of WORM_SOBER.AC infection tactics.
This makes WORM_SOBER.AC to be very noticeable, since eventually it will seriously slow down your computer. Deleting WORM_SOBER.AC is the only cure that will allow you to regain the memory it steals for its criminal processes. Automated and updated security software will be best for this, since WORM_SOBER.AC may conceal itself in ways that make it difficult to expunge completely by hand.
File System Modifications
- The following files were created in the system:
# File Name 1 bbvmwxxf.hml 2 gdfjgthv.cvq 3 lageinf.lin 4 nonrunso.ber 5 rubezahl.rub 6 runstop.rst 7 services.exe
Registry Modifications
- The following newly produced Registry Values are:
HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run_WinCheck = %windir%\ConnectionStatus\Microsoft\services.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnceWinCheck = %windir%\ConnectionStatus\Microsoft\services.exeHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunWinCheck = %windir%\ConnectionStatus\Microsoft\services.exe
Leave a Reply
Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter . If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.