Skip to main content
Skip to main content
Microsoft Security Intelligence
Cart 0 items in shopping cart
Sign in
Published Mar 07, 2005 | Updated Sep 15, 2017

Worm:Win32/Sober.L@mm

Detected by Microsoft Defender Antivirus

Aliases: WORM_SOBER.L (Trend Micro) W32/Sober.m@MM (McAfee) Win32.Sober.L (CA) W32.Sober.L@mm (Symantec) W32/Sober-L (Sophos) Sober.L (F-secure) I-Worm.Win32.Sober.M (Global Hauri) Sober.O (Panda)

Summary

Win32/Sober.L@mm is a mass-mailing worm that targets certain versions of Microsoft Windows. The worm sends itself as an attachment to e-mail addresses that it finds on an infected computer. The worm is activated when a user opens the attachment.
To remove Win32/Sober.L@mm, you must use a removal tool such as the Windows Malicious Software Removal Tool, or a tool provided by a member of the Virus Information Alliance. After you remove Win32/Sober.L@mm from an infected computer, it is important to take steps to prevent re-infection. Do not reconnect your computer to the Internet until the computer is protected from re-infection. See the "Preventing Infection" section for more information.
Follow us