W32.Sober.O@mm!enc virus

Our Norton software is telling us it has detected a virus that it cannot repair because access to the file has been denied. The virus is named:


W32.Sober.O@mm!enc

The only visible results from having this virus so far has been a large amount of junk mail going to my junk mail folder-154 messages in there this morning. Can you help me?

Thanks,
Lili Keller

 

Hello Lili,

Try running NAV's scan in safe mode - tap the F8 or F5 key at bootup.

IF that doesn't work, run on-line scans - click on Quick Links at the top of this page > Recommended Links. Run eTrust, Housecall, RAV on line scanners. It would be a good idea to run these anyway to check NAV.

Regards - Charles

 

Nav

Hi Lili,

NAV is Norton Anti Virus - your antivirus program.

FYI!

Cindy

 

Disable System Restore, and reboot. Then enable it, then do your scan again.

 

An update to this thread:

Lilli sent me an email wanting to know what NAV was - my response:

NAV is Norton, appologies for using jargon. The reason for scanning in safe mode is to allow Norton to remove or quarentine any file it finds. A great many files, good and bad, won't allow themselves to be accessed for either removal or copying because of a process that won't let go. This is true of XP and especially of malware. Safe mode only loads/runs basic XP processes and no applications thereby maximizing the chances of file removal for Norton.

I later realized that I'm assuming XP for the OS. What I wrote about XP is true of all Oses.

Regards - Charles

 

Lili Keller--Both charlesvar and markp62 have given you good advice.
To learn a little more about this virus and a specific method of deleting it, read this
http://securityresponse.symantec.com/avcenter/venc/data/w32.sober.removal.tool.html