Symantec W32.Sober Removal Tool

Symantec Security Response has developed a removal tool to clean the infections of the following W32.Sober variants: ￭ W32.Sober@mm ￭ W32.Sober.B@mm ￭ W32.Sober.C@mm ￭ W32.Sober.D@mm ￭ [email protected] ￭ W32.Sober.gen ￭ W32.Sober.E@mm ￭ W32.Sober.F@mm ￭ W32.Sober.G@mm ￭ W32.Sober.I@mm ￭ W32.Sober.L@mm ￭ W32.Sober.N@mm ￭ W32.Sober.O@mm ￭ W32.Sober.Q@mm ￭ W32.Sober.V@mm ￭ W32.Sober.W@mm ￭ W32.Sober.X@mm

W32.Sober.gen is a generic detection that can detect any variants of W32.Sober. If your computer is detected as infected with W32.Sober.gen, download and run the tool. In most cases, the tool will be able to remove the infection.

The W32.Sober Removal Tool does the following: ￭ Terminates the W32.Sober viral processes. ￭ Deletes the W32.Sober files. ￭ Deletes the dropped files. ￭ Deletes the registry values that the worm added

What's New in This Release:

￭ released to add support for W32.Sober.X@mm