Editor: It is a useful utility, designed to provide you with ways of erasing the Sober malware.
The Virus comes in form of an e-mail, with plenty of subject, body or attachement name. It is written in Visual Basic 6 and packed with UPX.
The virus uses two or more instances of itself at the same time, each one checking to see if the other(s) is still running. It kills one of the instances makes the other(s) restart it and also makes manual killing of the processes difficult. The instances will examine to see whether the registry key is present, and whether it is not they recreate it.
