Scribd
Upload
17 views

Virus W32

Virus alert warns users to beware of emails from unknown senders containing zip file attachments as they may contain the Sober virus. The virus can infect systems by tricking users into opening zip files with names related to passwords, accounts, or software updates. The summary provides steps to download a virus removal tool from Symantec and delete registry entries added by the virus to maintain system security.

Uploaded by

Shares_Together
Copyright
© Attribution Non-Commercial (BY-NC)
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOC, PDF, TXT or read online on Scribd
17 views

Virus W32

Virus alert warns users to beware of emails from unknown senders containing zip file attachments as they may contain the Sober virus. The virus can infect systems by tricking users into opening zip files with names related to passwords, accounts, or software updates. The summary provides steps to download a virus removal tool from Symantec and delete registry entries added by the virus to maintain system security.

Uploaded by

Shares_Together
Copyright
© Attribution Non-Commercial (BY-NC)
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOC, PDF, TXT or read online on Scribd
You are on page 1/ 2

Virus W32.Sober.

O@mm
Saturday, 11 February 2006 04:50

Virus Level 3
Perhatian kepada semua pengguna:

Berhati hati jika anda menerima sebarang e-mail drp pengguna yg tidak dikenali atau dikenali yg
mengguna email msn, yahoo, google, hotmail, bigfoot. Sila padam email berkenaan jika
mengandungi file attachment zip. Email ini disebar dlm bahasa English atau Jerman.

Cth xip file yg dihantar:


LOL.zip
autoemail-text.zip
_PassWort-Info.zip
Fifa_Info-Text.zip
okTicket-info.zip
our_secret.zip
mail_info.zip
error-mail_info.zip
account_info.zip
account_info-text.zip

Bila anda membuka zip files berkenaan, anda akan dapati

Sila download virus removal


1. http://securityresponse.symantec.com/avcenter/FxSobr.exe

kemudian anda perlu


1. Click Start > Run.
2. Type regedit >Click OK.
3. Navigate to the subkey:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

4. In the right pane, delete the value:

" WinStart" = "%Windir%\Connection Wizard\Status\services.exe"

5. Navigate to the subkey:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

6. In the right pane, delete the value:


"_WinStart" = "%Windir%\Connection Wizard\Status\services.exe"

7. Exit the Registry Editor.

You might also like