Koobface is a computer worm that spreads via social networks site such as Facebook, Bebo or MySpace. The latest variant of this worm targets mostly Facebook likely because this site has more than
400 million members and the number grows each day. Koobface uses various misleading methods to fool people into installing it. Very often cyber criminals use fake video or greeting cards websites. The worm comes as a flash player update or a free greeting card. Once downloaded, it makes a copy of itself in %WINDOWS% (usually C:\Windows) directory. Koobface creates a file called freddy[RANDOM MUNBER].exe. For example:
- freddy35.exe
- freddy36.exe
- .....
- freddy40.exe
- freddy34.exe
- .....
- freddy79.exe
- and so on.
As you can see the main process may be different in each compromised computer. Then Koobface worm connects to particular domains and downloads even more malware onto your PC. Finally, it starts sending malicious messages from your Facebook account. More information about this virus:
detailed Koobface description and removal instructions.
What is Koobface and how to get rid of it?
4/
5
Oleh
soni agus
Ditulis soni agus
Pada 05.09
