W32.Sober@mm is a mass-mailing worm that uses its own SMTP engine to spread itself. The subject of the email varies, and it will be in either English or German.
The name of the email attachment varies, and it will have a .bat, .com, .exe, .pif, or .scr file extension.
This threat is written in the Microsoft Visual Basic programming language and is compressed with UPX.
When W32.Sober@mm is first run, it may display the fake error message "File not complete!"
Virus definitions dated October 24, 2003, revision 20 and greater, will detect this threat.
Symantec Security Response has developed a removal tool
to clean the infections of W32.Sober@mm.
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.