Published Nov 16, 2010 | Updated Sep 15, 2017


Severe |Detected with Windows Defender Antivirus

Aliases: Rootkit.Win32.Agent.bivu (Kaspersky) Rootkit.Agent2.AVRM (VirusBuster) Rkit/Agent.bivu (Avira) Win32/Koobface.WA (CA) Trojan.NtRootKit.9616 (Dr.Web) Win32/Tinxy.CF (ESET) Rootkit.Win32.Agent (Ikarus) W32/!sys (McAfee) W32/Koobface.KG.worm (Panda) W32/Koobface-AV (Sophos) Worm.Win32.Koobface.gzc!sys (Sunbelt Software) W32.Koobface (Symantec)


VirTool:WinNT/Koobface.P is a device driver used by variants of Win32/Koobface to divert web traffic to a web search hijacker component.
To detect and remove this threat and other malicious software that may be installed in your computer, run a full-system scan with an up-to-date antivirus product such as the following:
For more information on antivirus software, see
Follow us