How do I get rid ofWorm I-Sober Virus?

sarn_4

Can anyone help me please?

My AVG Anti-Virus will NOT get rid of it.

Does anyone have any ideas of a free removal site before I pay $29.95 to Adware?

Your help would be very much appreciated.

Thank you

Woby_Tide

http://securityresponse.symantec.com/avcenter/venc/data/w32.sober.removal.tool.html

sarn_4

It didn't do it.

I ran the scan etc which took about an hour or so and then it came up with W32 not found! So I did another AVG Search and wadda ya know, it came up with the same Virus again and I cannot get into my control panel at all.

Anymore ideas please? I'm desperate (sp!)!!!

Figment

Try this

robnye

when the i-sober virus reared its head back in october 2003, it came on the back of 3 other viruses.

when i create a new install, i run the following fixes

fixblast
fixsober
fixnetsky
fixwelch
fixsasser

they can all be found at
http://securityresponse.symantec.com/avcenter/tools.list.html

I would suggest you download the fix tools, update your AV .

disconnect from the internet
run the virus bug fixes
then run a full AV scan

what version of AVg are you running? Ver 6 or 7?

sarn_4

Thanks to everyone that has helped me - gotten rid of the Sober Virus, BUT it has left me with a few problems i.e. cannot access the control panel - everytime I click on something in the control panel it comes up with a box that says

Cannot find the file C/WINDOWS/rundll32.exe (or one of its components). Make sure the path and filename are correct and that all required libraries are available.

Also, since I've had this virus I keep getting a web page come up which I've never heard of - I think it's called WhatUWant - and the only way I can get rid of it at the moment because I can't get into my control panel is to "end task".

Any ideas please?

robnye

i am sure you can do a reinstall/fix windows xp install

try putting the cd in and see what options it gives you

sarn_4

I'm on Windows 98 not XP and I haven't got a disc. So I don't know what to do.

Do you think I'll have to take it somewhere and pay a fortune??????

monomer

The sober family of viruses have a sneaky trick to keep itself alive.

The newest variant in the Sober family of Windows viruses resurrects itself if some of the parts it leaves on infected machines are not deleted.

Source: http://news.bbc.co.uk/2/hi/technology/4026541.stm

Nasty.

peter_the_piper

As its likely that parts of the virus are still inside somewhere how about running a hijack this scan, program available from Frans list at the top and install to its own folder, save scan and post on one of the many sites available to help you. EG http://www.d-a-l.com/help/forumdisplay.php?s=6234235d1fff78ad25f30e36193f22c6&f=8
You can use the self help route
http://hijackthis.de/index.php but if you are not sure if your computer take the other route.