We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Worm:Win32/Sober.V@mm!CME157
Detected by Microsoft Defender Antivirus
Aliases: Win32/Sober.Q (CA) Email-Worm.Win32.Sober.u (Kaspersky) W32/Sober.t@MM (McAfee) W32.Sober.V@mm (Symantec) WORM_SOBER.AD (Trend Micro) W32/Sober-U (Sophos)
Summary
Win32/Sober.V@mm!CME-157 is a mass-mailing worm. The worm spreads by sending a copy of itself as an e-mail attachment to e-mail addresses that it gathers from certain files on the host computer. The worm runs on when the user opens the e-mail attachment.
To detect and remove this worm, run a full-system scan with an up-to-date antivirus product such as the Microsoft Safety Scanner (http://go.microsoft.com/fwlink/?LinkId=212742). For more information, visit http://www.microsoft.com/athome/security/downloads/default.mspx
Follow us
