SysChat is a free online computer support community. Ask questions, share resources, contribute knowledge and discuss technology. Join our growing community to access all features. Register Now!

SysChat » Tips 'n' Tricks » Security » How to remove Koobface Virus?

Security

tips on computer security, virus, spyware and malware prevention

Comment
 
LinkBack Tip Tools
 

How to remove Koobface Virus?

By Sajid
10-24-2009
Koobface is the latest buzz in the arena of computers. No it is not a web service, neither it is an amazing software package. Koobface is actually the latest Internet worm which targets the popular social networking phenomenon. Many of the Facebook users have already been infected by this highly contagious Internet worm.

Why Is Your Computer Prone To Fall Its Prey?

Social networking has become a daily activity of every Internet user and that is the reason that Koobface creators have decided to make users of social networks as their targets. Koobface spreads rapidly once it enters your computer leading to slow and sluggish performance. It dumps 'tinyproxy.exe' file on to your computer which hijacks your machine and leads to its automatic operation leaving it very vulnerable.

How to Stay Away From Koobface Virus?

It starts with the arrival of some automated messages or emails having catchy or wired titles like:
  • Paris Hilton Tosses Dwarf On The Street
  • You must see it!!! LOL.
  • My friend catched you on hidden cam
  • Examiners Caught Downloading Grades From The Internet
  • Is it really celebrity?
  • You look so amazing funny on our new vide
  • Funny Moments
Avoid accessing content of such messages and emails.

How to Remove Koobface Virus?

• As soon as you realize its presence, scan your computer with a good anti-virus program. This should be the first and foremost step.

• Use the Add/Remove Program tool from your computer’s Control Panel to remove the Koobface malicious program.

• Some of the Koobface malicious programs restore back on to your system. Under such case, it is better to delete its processes and registry files. It is not that much difficult, as below steps will help you with the same:

Press Alt + Ctrl + Delete to open the Task Manager
End all the Koobface processes such as

Code:
%SYSTEMROOT%\bolivar28.exe
che07.exe
bolivar28.exe
%WinDir%\system32\nScan\ekrn.exe
%WinDir%\system32\nScan\ecls.exe
%WinDir%\system32\splm\ncsjapi32.exe
%WinDir%\bolivar28.exe
C:\Windows\fbtre6.exe
Now you need find and remove its Registry Files.

Type “regedit” inside the RUN field and press ENTER to access the registry files of your computer.

Find all the Koobface Registry values installed on your system and delete them. Below are few of its examples:
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\Intelli Mouse Pro Version 2.0B\StubPath: "%WinDir% \System32\splm\ncsjapi32.exe"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr ent Version\Run\"systray" = "C:\Windows\fbtre6.exe"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunOnce\*Intelli Mouse Pro Version 2.0B*: "%WinDir% \System32\splm\ncsjapi32.exe"
  • HKEY_USERS\Software\Microsoft\Windows\CurrentVersi on\RunOnce\*Intelli Mouse Pro Version 2.0B*: "%WinDir% \System32\splm\ncsjapi32.exe"
  • HKEY_USERS\Software\Microsoft\Windows\nScan32\Exec uteDate: "14\8\2008"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr ent Version\Run\"systray" = "c:\windows\mstre6.exe"
  • HKEY_USERS\Software\Microsoft\Windows\CurrentVersi on\Run\Intelli Mouse Pro Version 2.0B: "%WinDir% \System32\splm\ncsjapi32.exe"
  • HKEY_USERS\Software\Microsoft\Windows\CurrentVersi on\Explorer\Advanced\Hidden: "2"
  • HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\ Navigating

Always update your Operating System and make sure that you always Turn On your Firewall settings. And keep updating your anti-virus program as it will be the first to intimate you about the arrival of deadly Koobface Virus.

One serious advice is that be careful while you are involved in Social Networking activities. Never ever visit the strange websites and avoid accessing the URLs and content posted by strangers.

Surf Carefully To Keep Your Computer Healthy!
Comment

Tags
koobface virus, malware, manual, removal, spyware




Tip Tools

Similar Threads
Tip Tip Starter Category Tips Last Post
How to Remove the Recycler Virus KarlM Security 1 11-08-2009 11:07 PM
Remove the Google Hijack Virus! KarlM Security 0 06-17-2009 07:06 AM
How to Remove the Raila Odinga Virus KarlM Security 3 04-01-2009 10:30 AM
Remove Win32 Heur Virus: Windows Vista and XP KarlM Security 0 02-19-2009 09:49 PM
remove pen drive virus poojakumar General Tech Support 1 05-31-2008 05:23 PM

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is on
Smilies are on
[IMG] code is on
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are on



» Ads



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54