Symantec W32 Sober Removal Tool is a removal utility to clean the infections of W32.Sober variants: W32.Sober@mm,
W32.Sober.B@mm, W32.Sober.C@mm, W32.Sober.D@mm, W32.Sober@mm.enc, W32.Sober.gen, W32.Sober.E@mm, W32.Sober.F@mm,
W32.Sober.G@mm, W32.Sober.I@mm, W32.Sober.L@mm, W32.Sober.N@mm, W32.Sober.O@mm, W32.Sober.Q@mm, W32.Sober.V@mm,
W32.Sober.W@mm, W32.Sober.X@mm. If, when running the tool, you see a message that the tool was not able to remove one or more files, run the tool in Safe mode. Restart the computer and run the removal tool again to ensure that the system is clean. The tool terminates the W32.Sober viral processes, deletes the W32.Sober files, deletes the dropped files, deletes the registry values that the worm added and has available command-line switches with this tool. It is strongly recommended that you not use the /NOFIXREG switch when running Symantec W32 Sober Removal Tool for the first time.
When Symantec W32 Sober Removal Tool has finished running, you will see a message indicating whether W32.Sober infected the computer. In the case of a worm removal, the program displays the total number of the scanned files, number of deleted files, number of terminated viral processes and number of fixed registry entries.
