How to delete W32 Sober AA@mm from my computer system?

[WILTON]

Normally I like to surf the net for the information related to games. I like to download and play games from internet. For this purpose I have to download many related add-ons. The thing was going very fine but now my personal computer is running very slow. Then I thought that this problem might be because of any kind of virus or worm. So I scanned my system and found that W32 Sober AA@mm is residing in my personal computer. I am trying to delete this virus from my computer system but it comes back again and again. Can anybody help me to get rid of the W32 Sober AA@mm from my personal computer?

[Steve123]

You can go for system restore. For restoring your system to its previous position you can follow these simple steps. Go to start then to Programs then to Accessories then to System tools. Now you can select system restore. Now in the system restore window, select the date for the system restores. Reboot your system and you will get your system as it was a one week before. There is no guarantee that system restore will solve your problem but it is one of the methods which is used as a counter measure.

[Shen]

W32 Sober AA@mm which is detected on your computer comes in the category of internet worm. The threat level of this worm is medium. But whatever be the amount of threat level it is not good for your personal computer so I will suggest you to delete this worm from your personal computer. Worms normally slows down the performance of computer system

[Big Fish]

Sober.AA is a mass mailing worm uses e-mail addresses collected from the system to distribute infected mails. The worm uses its own SMTP engine to spread. The infected mail will be in English or German.
The infected mail subject in English will be one of the following
Error in your eMail
Your Updated Password!
The infected mail subject in German will be one of the following
Ihr Passwort wurde geaendert!
Fehlerhafte Mailzustellung
Ihr Account wurde eingerichtet
The infected mail Attachment name in English will be one of the following
Passw_Data.zip
Mail_Data.zip
The infected mail Attachment name in German will be one of the following
PDaten.zip
Anleitung.zip
The infected mail message body in English will be one of the following
You notified us that you have forgotten your password.We have changed your password to a random sequence of letters and digits! For more detailed information, see the attached password file ...

Your eMail has occurred an unknown error on our Server.Please read your mail and check the text.The full email is attached!
The infected mail message body in German will be one of the following

Ihr Passwort wurde erfolgreich geaendert.Ihre neuen Account-Daten und Passwort befinden sich gesichert im Anhang!

Diese Nachricht wurde Automatisch generiert. - Ihre EMail konnte nicht empfangen oder gesendet werden.

Danke das Sie sich fuer uns entschieden haben.Um ihren neuen Account zu aktivieren, folgen sie der kurzen Anleitung im Anhang. Es sind nur 2 Schritte noetig!
When the infected e-mail attachment is executed, it displays a fake error message "WinZip Header is missing!" with title "WinZip Self-Extractor" and copies to %WINDOWS%\PoolData\services.exe. It also drops SMSS.EXE, CSRSS.EXE, and data files in the infected system.Then it modifies the registry to load automatically on next startup. The registry key modification is given below.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run = "WinData"="%WINDOWS%\PoolData\services.exe"
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run = "_WinData"="%WINDOWS%\PoolData\services.exe"

[Zachary]

If you are already infected with this worm, you can remove it from your computer using Solo Antivirus software. Solo antivirus can detect and remove W32.Sober.AA@mm safely. You can download this antivirus for the trial period. This antivirus is available for the trial period of 30 days. Solo anti-virus not only scans for all viruses, it contains a unique System Integrity Checker to protect you from New Internet Worms, Backdoors and malicious VB, Java Scripts. It also effectively removes all existing Internet Worms, File viruses, malicious VBS, Java scripts, Trojans, Backdoors, boot sector, partition table and macro viruses.

[Milton.J]

System restore and antivirus software will definitely remove this virus worm from your computer system but I will suggest you to follow some preventive measures to avoid problems like these. Upgrade you antivirus software and the other software which you are using in your system. Do not forget to enable your firewall setting and always used strong password for your personal computers.