Name : Similare.exe
Path : %System%\similare.exe"
[ C:\Windows\System32\similare.exe ]
type : Internet
Name : W32.Sober@mm
Alias : I-Worm.Sober, W32/Sober-A,
level : Medium
Similare.exe is the main
component dropped by Sober Worm. It is
a mass mailing worm uses e-mail addresses
collected from the system to distribute infected
mails. The worm uses its own SMTP engine to
spread. The worm is written in visual basic and
compressed with UPX.
as an e-mail attachment with random message
subject and message body. The infected mail
attachment extension is chosen bat, .com, .exe, .pif,
or .scr. [ Example: anti_virusdoc.pif ]
When the infected e-mail
attachment is executed, it displays the message
box "File not complete!" and
copies itself to Windows system folder as
similare.exe and two random file names. Then
it modifies the registry to load automatically on
next startup. The registry key modification is
Sober worm stores the e-mail
address collected from the infected system in a
file name called MEDIA.DLL in Windows\System\MACROMED\HELP
folder. In some cases the infected mail
will appear as a fix from an antivirus company.
How can I protect my
Solo has incorporated
similare.exe in its signature file to protect
users from this worm attack. Solo antivirus
registered users are already protected from this
worm. Make sure that you have installed
registered version of Solo Antivirus to protect
your system from all virus threats.
to remove this worm?
you are already infected with Similare.exe process,
you can remove it from your computer using Solo
Antivirus software. Solo antivirus can
detect and remove W32.Sober@mm safely.
Use the following link to Download 30 day
trial version of Solo antivirus to
remove viruses from your computer.
Solo anti-virus not only
scans for all viruses, it contains a unique System
Integrity Checker to protect you from
New Internet Worms, Backdoors and
malicious VB, Java Scripts. It also
effectively removes all existing Internet Worms,
File viruses, malicious VBS, Java scripts,
Trojans, Backdoors, boot sector, partition table
and macro viruses.
purchase Solo antivirus using the link