PDA

View Full Version : Sober prevents download


richardb92
June 29th, 2009, 01:44 AM
I have a friend's computer that is behaving strangely
So I ran the ESET online scan and it found Sober and says that to remove it I must download the install file.
However when I click on the download button a page opens called About:blank
What is the problem and how do I fix it?
Thanks

Brambb
June 29th, 2009, 08:03 AM
Seems the removal tool download links are currently not working from the .com site. You can still get them from the source (.it) at the following page: http://nod32.it/download/free-virus-remover.php (http://nod32.it/tools/cleaners/SBRCLN.ZIP for sober)

ASpace
June 29th, 2009, 02:16 PM
If the suggested removal tools can't help , download and run these two :

Microsoft Malicious Software Removal Tool (http://www.microsoft.com/downloads/details.aspx?familyid=ad724ae0-e72d-4f54-9ab3-75b8eb148356&displaylang=en)

ComboFix (http://www.bleepingcomputer.com/combofix/how-to-use-combofix)

At the end , install a copy of ESET NOD32 Antivirus version 4 (free trial) (http://www.eset.com/download/free_trial_download_int.php) . Install , update and perform full scan , followed by a reboot .

BFG
June 29th, 2009, 08:33 PM
Hello richardb92,

If ASpace's and Brambb's suggestions don't work you could download the Trial version to a different machine and transfer it over on a flash drive or by burning it to a CD.

If installing the current version of ESET is disallowed after transferring you could always try installing 2.7 in Safe Mode and then scan.

ESET detected many of Sober's variants heuristically when they were first released so updating might not even be necessary if that's a problem. It's worth a shot anyway.

BFG

Brummelchen
July 1st, 2009, 10:20 PM
cleaning tools - much useless in most situations.
And if you read the facts its better to save important data a setup up a clean system (with format) again.
http://en.wikipedia.org/wiki/Sober_worm

even microsoft wrote that an infected system cannot be cleand.