Net-Worm.Win32.Koobface net worm infects Myspace and Facebook users

There is a new virus spreading among both Facebook and Muspace uswers – Net-Worm.Win32.Koobface.

It has two variants: Net-Worm.Win32.Koobface.a. /for Myspace/  and Net-Worm.Win32.Koobface.b /for  Facebook/

In  their malicious action, the net worms transform victim computers  into zombie computers to form botnets.

What is a Botnethttp://en.wikipedia.org/wiki/Botnet 

The Net-Worm.Win32.Koobface.a. /for Myspace/ worm creates many commentaries to friends’ accounts.

 The Net-Worm.Win32.Koobface.b /targets Facebook users/ creates many spam messages and sends them to the infected users’friends via the Facebook.

Messages and comments can include ‘Paris Hilton Tosses Dwarf On The Street’; ‘Examiners Caught Downloading Grades From The Internet’; ‘Hello’;’ You must see it!!! LOL. My friend catched you on hidden cam’;’ Is it really celebrity? Funny Moments’ and many others.

Messages and comments include links to http://youtube     .pl.

If you click on this link, you are redirected to http://youtube      .ru,  – a site which contains a video clip.

If the user wants to watch it, a message pops up reading that you need the latest version of Flash Player to watch the funny clip.

Of course, instead of the latest version of Flash Player, a malicious file called codecsetup.exe is downloaded to  victimcomputer; this file is also a network worm.

Advertisements

3 Responses

  1. When I received this message (by the way, another possible heading is “Cool new video with you” or something close to that), it did not ask me to install the flash player, it just flashed the window, and then automatically downloaded itself.
    The worm also deletes the system file:
    HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\Navigating
    which disables your user’s web browser.

  2. Just got infected! Crap! What it did to me was generate a pop-up using a very real looking Windows XP Pro window that freezes what you’re doing unless you enter a captcha. Or you can use Alt-Ctrl-Del and have task manager pop up and stop it there. It only happens when I was using IE – surfing the ‘net. It threatens to ‘shut down’ after 2 minutes if nothing is entered. I let it “run out”. Nothing happens. It’s just annoying – if anything.

  3. […] Net-Worm.Win32.Koobface net worm infects Myspace and Facebook … […]

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: