Computer infected

Mene je enkrat v taki situaciji rešila Restore point.

Naštimaj si ta program: klik, pa še kak dober antivirus (jaz uporabljam nod32), bootaj v safe mode, poženi najprej ewida, potem pa še nod-a. Jaz sem se na tak način rešil tega sporočila, ki je najbolj annoying stvar, ki se mi je na računalniku kadarkoli zgodila (na winsih mislim).

Tole mi je znano ze od win98 kjer je cel blue screen bil s tem napisom...na koncu mi stric google zaupal da je to crv po imenu sober. Ti bom kr copy paste...
Microsoft Security Advisory (912920)
Systems that are infected with Win32/Sober.Z@mm may download and run malicious files from certain Web domains beginning on January 6, 2006
Published: January 3, 2006

Microsoft is aware of the Sober mass mailer worm variant named Win32/Sober.Z@mm. The worm tries to entice users through social engineering efforts into opening an attached file or executable in e-mail. If the recipient opens the file or executable, the worm sends itself to all the contacts that are contained in the system’s address book. Customers who are using the most recent and updated antivirus software are at a reduced risk from infection by the Win32/Sober.Z@mm worm.

On systems that are infected by Win32/Sober.Z@mm, the malware is programmed to download and run malicious files from certain Web domains beginning on January 6, 2006. Beginning approximately every two weeks thereafter, the worm is set to begin downloading and running malicious files from additional sites on the same Web domains.

As with all currently known variants of the Sober worm, the worm does not appear to target a security vulnerability, but rather relies on the user opening an infected attachment.

Microsoft added detection for the latest Sober variants in its December 2005 update to the Malicious Software Removal Tool and in the Windows Live Safety Center.

Customers who believe that they are infected with Sober or are not sure whether they are infected should visit Safety.live.com and choose "Protection Scan" or run the latest version of the Malicious Software Removal Tool from either Microsoft Update or Windows Update to ensure that their systems are free of infection. Additionally, Windows OneCare from Microsoft provides detection for and protection against Sober and its known variants.

Microsoft will release an updated version of the Malicious Software Removal Tool on January 10, 2006, that will further assist in the detection and removal of known malware threats including Sober and its known variants. See Microsoft Knowledge Base Article 891716 for additional details on how to deploy the Malicious Software Removal Tool with the latest definitions to help protect against malware.

For more information about Sober, to help determine whether you have been infected by the worm, and for instructions on how to repair your system if you have been infected, see the Microsoft Virus Encyclopedia. For Microsoft Virus Encyclopedia references, see the “Overview” section. We continue to encourage customers to use caution with unknown file attachments and to follow our Protect Your PC guidance of enabling a firewall, getting software updates, and installing antivirus software. Customers can learn more about these steps by visiting the Protect Your PC Web site.


Check for and remove the Sober infection.

Use the Microsoft Windows Malicious Software Removal Tool, Safety.live.com, or Windows OneCare to search for and remove the Sober worm and its variants from infected systems.

Ja možno da je bil ta sober. Pa tud veseli me da nisem bil sam v tem boju. ;)

Jaz sem ga dobil malo pred koncem prejšnega leta in na internetu nisem našel nič o njem ker sem se res trudil in doben antivirusni mi ni zaznal. Škoda da nimam tudi sam restore point oziroma vrjetno mam pa nisem sprobal ker ne znam oziroma mi ni na pamet padlo.

Zgleda da sem bil eden prvih srečnežev pač ki smo ga dobili in še ni bil doben antivirusni mu kos.