tpl_menu_l MainDownloadF.A.Q.ForumGallerySitemap tpl_menu_r
tpl_top_l Home > News > Fix > Koobface Virus Spreading on Facebook tpl_top_r
Navigator
User Block
Hi Guest
IP: 38.107.191.94

Username
Password
 
 News
Koobface Virus Spreading on Facebook
Date 02/04/2010 13:20  Author deangrell  Hits 129  Language Global
 
Title: Koobface AKA: W32.Koobface,W32/Koobface.AZ,Boface  
Type: Worms 
Severity scale:Koobface severity is 72  (72 / 100)  
 
Koobface worm is distributed on social networks, usually on MySpace and Facebook. It embeds itself on victim’s profile and displays links to malicious websites. The websites promote video codec which is actually the Koobface worm. Those sources might also install the worm without notifying visitors.

Koobface is also known as W32/Koobface, W32/Koobface.AZ, W32.Koobface and Boface. Once it gets on a machine, it checks if there are cookies of social networks. If it finds the cookies, it infects victim’s profile. If Koobface worm can’t find evidence of social networking websites, it simply erases itself.

Koobface also loads pop-ups that look like MS Windows error messages. The pop-up contains the following text: “Error installing Codec. Please contact support.”

For help removing this common virus, please contact us at your earliest convenience!  


What Is Koobface?

Although famous as virus, the Koobface is actually a worm. A worm is a malware that sneaks into your computer and replicates itself throughout the PC. The difference between a virus and a worm is that, virus attaches it self to the file where as a worm actually replaces it. A worm can even send automated emails to other PC's trying to infect them using yours.

So  Koobface is a worm and attacks a computer by downloading some .exe files into your computer. The main thing is to identify the threat at this point before it is too late.
See all 5 photos

 
 
 

How Koobface Infects a Computer?

Basically if you are using facebook you should watch for automated email messages that display either insulting message or some thing very tempting about you. Messages like, "you look funny in this video" or "you look so stupid in this pic" can be used to persuade somone to click on the link attached. Once the user clicks on them it takes you to a video which doesn't play and they ask you to download certain codecs which can be a 'flash_player.exe' file.

If the file is downloaded your computer becomes open to Koobface malware. It downloads a file 'tinyproxy.exe' which hijacks your PC. It can even alter search results from google,yahoo etc and redirect you to websites selling malicious softwares. 
There are no comments.
tpl_foot_l
Please contact me for your free quote or to set up a time to diagnose and repair your machine!
Dean Grell - 620.263.0808  
tpl_foot_r