In the new WORM_SOBER.AC, now on yellow alert, a simple yet powerful Anti Virus Retaliation is included. What”s more is that its only target is… guess who?? MICROSOFT!!
Microsoft’s new feature, the Microsoft Windows Malicious Software Removal Tool, is currently being targeted by the new Sober variant.
What it does is, it searches the list of running process for MRT.EXE (process name for Microsoft Windows Malicious Software Removal Tool), kills MRT.EXE and then displays this message box:
The message box above doubled with the detection of Microsoft Windows Malicious Software Removal Tool may make an inexperienced user feel safe and relaxed, making him think that he is not infected.
Microsoft’s new feature, the Microsoft Windows Malicious Software Removal Tool, is currently being targeted by the new Sober variant.
What it does is, it searches the list of running process for MRT.EXE (process name for Microsoft Windows Malicious Software Removal Tool), kills MRT.EXE and then displays this message box:
The message box above doubled with the detection of Microsoft Windows Malicious Software Removal Tool may make an inexperienced user feel safe and relaxed, making him think that he is not infected.