BitDefender

I use Win XP and have it set to show all files, including hidden files.

Have just purchased BitDefender and after a virus scan it shows that I have
Win32.Sober.I@mm. It refuses to quarantine it or delete it and I get the
following report -


C:\Documents and Settings\Ted Sloan\Application
Data\Thunderbird\Profiles\xwlpuncb.default\Mail\Local
Folders\Inbox=>(message 6=>[Subject: Registration confirmation][Date: Thu,
16 Dec 2004 02:32:36 GMT]=>(MIME part)=>imaginet.zip Infected
Win32.Sober.I@mm
C:\Documents and Settings\Ted Sloan\Application
Data\Thunderbird\Profiles\xwlpuncb.default\Mail\Local
Folders\Inbox=>(message 6=>[Subject: Registration confirmation][Date: Thu,
16 Dec 2004 02:32:36 GMT]=>(MIME part)=>imaginet.zip Move failed
C:\Documents and Settings\Ted Sloan\Application
Data\Thunderbird\Profiles\xwlpuncb.default\Mail\Local
Folders\Inbox=>(message 6=>[Subject: Registration confirmation][Date: Thu,
16 Dec 2004 02:32:36 GMT]=>(MIME part)=>imaginet.zip Deleted
C:\Documents and Settings\Ted Sloan\Application
Data\Thunderbird\Profiles\xwlpuncb.default\Mail\Local
Folders\Inbox=>(message 6=>[Subject: Registration confirmation][Date: Thu,
16 Dec 2004 02:32:36 GMT]=>(MIME part) Update
C:\Documents and Settings\Ted Sloan\Application
Data\Thunderbird\Profiles\xwlpuncb.default\Mail\Local
Folders\Inbox=>(message 6 Update
C:\Documents and Settings\Ted Sloan\Application
Data\Thunderbird\Profiles\xwlpuncb.default\Mail\Local Folders\Inbox Update
failed


I have also downloaded a virus removal tool for this particular virus from
BitDefender and it can not find this virus. The same applies to Karspesky
and one on-line scanner. I have tried manually to remove it but can only go
in as far as " Inbox.sbd" and it is empty.

I have sent e-mail to Bit Defender but get an automated reply in French
which points me towards FAQ etc.

Am not sure if the virus is causing harm but it is irritating to see it
appear all the time in the report, especially after it is not reported by
Karspersky and one on-line scanner.

If anyone reading this uses BitDefender maybe you could tell me how to raise
that Company as far as getting a response in English as my French is now
very old !

Thanks - Ted

Ted Sloan wrote:
> I use Win XP and have it set to show all files, including hidden files.
>
> Have just purchased BitDefender and after a virus scan it shows that I have
> Win32.Sober.I@mm. It refuses to quarantine it or delete it and I get the
> following report -
>
>
> C:\Documents and Settings\Ted Sloan\Application
> Data\Thunderbird\Profiles\xwlpuncb.default\Mail\Local
> Folders\Inbox=>(message 6=>[Subject: Registration confirmation][Date: Thu,
> 16 Dec 2004 02:32:36 GMT]=>(MIME part)=>imaginet.zip Infected
> Win32.Sober.I@mm
> C:\Documents and Settings\Ted Sloan\Application
> Data\Thunderbird\Profiles\xwlpuncb.default\Mail\Local
> Folders\Inbox=>(message 6=>[Subject: Registration confirmation][Date: Thu,
> 16 Dec 2004 02:32:36 GMT]=>(MIME part)=>imaginet.zip Move failed
> C:\Documents and Settings\Ted Sloan\Application
> Data\Thunderbird\Profiles\xwlpuncb.default\Mail\Local
> Folders\Inbox=>(message 6=>[Subject: Registration confirmation][Date: Thu,
> 16 Dec 2004 02:32:36 GMT]=>(MIME part)=>imaginet.zip Deleted
> C:\Documents and Settings\Ted Sloan\Application
> Data\Thunderbird\Profiles\xwlpuncb.default\Mail\Local
> Folders\Inbox=>(message 6=>[Subject: Registration confirmation][Date: Thu,
> 16 Dec 2004 02:32:36 GMT]=>(MIME part) Update
> C:\Documents and Settings\Ted Sloan\Application
> Data\Thunderbird\Profiles\xwlpuncb.default\Mail\Local
> Folders\Inbox=>(message 6 Update
> C:\Documents and Settings\Ted Sloan\Application
> Data\Thunderbird\Profiles\xwlpuncb.default\Mail\Local Folders\Inbox Update
> failed
>
>
> I have also downloaded a virus removal tool for this particular virus from
> BitDefender and it can not find this virus. The same applies to Karspesky
> and one on-line scanner. I have tried manually to remove it but can only go
> in as far as " Inbox.sbd" and it is empty.
>
> I have sent e-mail to Bit Defender but get an automated reply in French
> which points me towards FAQ etc.
>
> Am not sure if the virus is causing harm but it is irritating to see it
> appear all the time in the report, especially after it is not reported by
> Karspersky and one on-line scanner.
>
> If anyone reading this uses BitDefender maybe you could tell me how to raise
> that Company as far as getting a response in English as my French is now
> very old !
>
> Thanks - Ted
>
>
>
>
It looks like BitDefender foung the virus in some of your received
e-mails. As long as you never executed the attachment of these various
e-mails, than you're not infected. The worm is just contained as an
e-mail attachment. If you want to get rid of it, delete the messages
with the sober.i attachments, but since it's inactive, all it's doing
now is just taking up space, and nothing more.