Skip to main content
Skip to main content
Microsoft Security Intelligence
199 entries found. Displaying page 1 of 10.
Updated on Jul 26, 2015
Microsoft security software detects and removes this worm.
 
Worm:Win32/Koobface is a worm that spreads by posting messages, containing a link to the worm, to the pages of other contacts on social network sites such as Facebook.com.
The worm can download and run other malware that could include updates of the worm.
The worm can also display pop-up messages or windows that attempt to lure users to install rogue security software.
 
Also detected as: Win32/Koobface.NBH(ESET)
Alert level: severe
Updated on Aug 09, 2015
Windows Defender Antivirus detects and removes this threat.
 
Win32/Koobface is a multi-component family of malware used to compromise machines and direct them in various ways at the attacker's will.
This could include using the affected machine to distribute additional malware, generate 'pay per click' advertising revenue, steal sensitive data, break captchas, and subvert the affected user's online experience.
Its components are varied, but include a worm that spreads by utilizing social networking sites such as Facebook and MySpace.
 
Alert level: severe
Updated on Mar 22, 2016
Windows Defender detects and removes this family of threats.
 
These family of threats can give a malicious hacker access to your PC. They can then use your PC to:
  • Spread malware
  • Cick on online ads to generate 'pay per click' advertising revenue
  • Steal your sensitive information
  • Break captchas

Threats in this family can spread using social networking sites such as Facebook and MySpace.

Alert level: severe
Updated on Apr 11, 2011
Win64/Koobface is a multi-component family of malware used to compromise machines and direct them in various ways at the attacker's will. This could include using the affected machine to distribute additional malware, generate 'pay per click' advertising revenue, steal sensitive data, break captchas, and subvert the affected user's online experience. Its components are varied, but include a worm that spreads by utilizing social networking sites such as Facebook and MySpace.
Alert level: severe
Updated on May 27, 2010
Alert level: severe
Updated on May 27, 2010
Alert level: severe
Updated on May 27, 2010
Alert level: severe
Updated on Feb 07, 2012
Alert level: high
Updated on Apr 11, 2011
Worm:Win32/Koobface.P is a worm that spreads by posting messages, containing a link to the worm, to the pages of other contacts on social network sites such as Facebook. This variant of Koobface may arrive posing as an installer for the Internet communications application "Skype".
Also detected as: Win32/Koobface!generic(CA)
Alert level: severe
Updated on May 17, 2010
Worm:Win32/Koobface.gen!C is a generic detection for worms that spread via social networking sites such as Facebook and MySpace.
Also detected as: Win32/Koobface.NBG(ESET)
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Koobface.U is a worm that spreads by posting messages, containing a link to the worm, to the pages of other contacts on social network sites such as Facebook. The worm has backdoor functionality that allows limited remote access and control.
Also detected as: Win32/Koobface.NCK(ESET)
Alert level: severe
Updated on May 17, 2010
TrojanProxy:Win32/Koobface.gen!G is the generic detection for a DLL component of the Win32/Koobface family. It is installed as a system service and redirects the browser to an attacker-controlled server when certain legitimate Web sites are accessed.
Also detected as: Win32/Koobface.GQ(CA)
Alert level: severe
Updated on Apr 11, 2011
TrojanDropper:Win32/Koobface.N is the detection for the malware dropper component of certain members of the Win32/Koobface family. It drops and installs the proxy and driver components.
Also detected as: Win32/Koobface.TB(CA)
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Koobface.A is a worm that may spread when a user logs into their profile account on the Internet social network sites 'MySpace' or 'Facebook'.
Also detected as: Win32/Koobface.NAA(ESET),Backdoor:Win32/Koobface.A(other)
Alert level: severe
Updated on Apr 11, 2011
TrojanProxy:Win32/Koobface.AL is a trojan that hijacks web search results. When users click on a result, they are diverted to a third-party search engine that may not display correct search results.
Also detected as: Win32/Koobface.WA(CA)
Alert level: severe
Updated on May 17, 2010
Worm:Win32/Koobface.gen!d is generic detection for variants of Win32/Koobface, a multi-component family of malware used to compromise machines and direct them in various ways at the attacker's will. This could include using the affected machine to distribute additional malware, generate 'pay per click' advertising revenue, steal sensitive data, break captchas, and subvert the affected user's online experience. Its components are varied, but include a worm that spreads by utilizing social networking sites such as Facebook and MySpace.
Also detected as: Win32/Koobface!generic(CA)
Alert level: severe
Updated on May 17, 2010
TrojanProxy:Win32/Koobface.gen!F is a generic detection for the proxy component of the Win32/Koobface family. It creates a proxy on an infected machine to redirect the users' Web browser.
Also detected as: Win32/Koobface.GA(CA)
Alert level: severe
Updated on May 17, 2010
TrojanProxy:Win32/Koobface.gen!J is the generic detection for a DLL component of the Win32/Koobface family. It is installed as a system service and redirects the browser to an attacker-controlled server when certain legitimate Web sites are accessed.
Also detected as: Win32/Koobface.MF(CA)
Alert level: severe
Updated on May 17, 2010
TrojanProxy:Win32/Koobface.gen!K is the generic detection for a DLL component of the Win32/Koobface family. It is installed as a system service and redirects the browser to an attacker-controlled server when certain legitimate Web sites are accessed.
Also detected as: Win32/Koobface.MF(CA)
Alert level: severe
Updated on May 17, 2010
Worm:Win32/Koobface.gen!F is generic detection for variants of Win32/Koobface, a multi-component family of malware used to compromise machines and direct them in various ways at the attacker's will. This could include using the affected machine to distribute additional malware, generate 'pay per click' advertising revenue, steal sensitive data, break captchas, and subvert the affected user's online experience. Its components are varied, but include a worm that spreads by utilizing social networking sites such as Facebook and MySpace.
Also detected as: Win32/Koobface!generic(CA)
Alert level: severe