How to remove Win32/Koobface worm

Malware Description:
Win32/Koobface (aka Worm.Koobface) is a manifold malicious application capable of performing a number of corrupt actions to compromise the victims’ privacy and disrupt the system. Technically speaking, Win32/Koobface is a computer worm that replicates itself through PC networks and contaminates all their poorly protected nodes. Once inside, Worm.Koobface will integrate itself with the compromised system and affect some of its processes. Among the corrupt activities Koobface can perform, one can name such ones as stealing personal data (including financial credentials like credit card details), triggering misleading alerts, issuing fake scanners, sending weird messages to Facebook or MySpace contacts, etc. As you may have figured out, the above-mentioned “pranks” may put your confidential information and even financial stability at stake. Win32/Koobface is known to propagate by hiding in fake video codecs or directly through security vulnerabilities of the target computer or network. Cooperating with its digital accomplice known as Win32/FakeXPA, which is a backdoor Trojan, Koobface worm may generate fabricated scanners and exaggerated popup ads about infections that allegedly reside on your machine – this way Win32/Koobface tries to promote installations of its affiliated rogue anti-spyware applications. However hard you may try, you will fail to find any forcible reason to have Win32/Koobface on board. Koobface worm is a menace to all computer activities and your privacy, so remove it ASAP once detected.

Malware Type: Worms

Malware Author: Unknown

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

Win32/Koobface Worm Free Scanner and Remover: Download Now

How to remove Win32/Koobface worm manually:
Manual removal of Win32/Koobface worm is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.

The files to be deleted are listed below:

  • kenny16.exe
  • GetModule25.exe
  • bolivar20.exe
  • bolivar24.exe
  • mstre8.exe
  • bolivar25.exe
  • bolivar26.exe
  • bolivar28.exe
  • bolivar30.exe
  • pp1.exe
  • ld02.exe
  • pp02.exe
  • pp03.exe
  • mstre12.exe
  • pp04.exe

The registry entries that need to be removed are as follows:

  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\GetModule25
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\sysftray2
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\sysldtray

Please, be aware that manual removal of Win32/Koobface is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal of Win32/Koobface worm, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Download Win32/Koobface Worm Automatic Remover

Like This Article? Let Others Know!

Post a Comment: