Published Apr 28, 2010 | Updated Sep 15, 2017


Severe |Detected with Windows Defender Antivirus

Aliases: Win-Trojan/Koobface.32768.E (AhnLab) W32/Koobface.HD (Command) TR/Tinxy.AU.327 (Avira) Win32/Koobface.ME (CA) Win32/Tinxy.AU (ESET) Trojan.Win32.Agent.dpcz (Kaspersky) W32/Koobface.worm.gen.z2 (McAfee) W32/Smalltroj.XRIN (Norman) Troj/Agent-MNW (Sophos)


VirTool:WinNT/Koobface.gen!E is a generic detection of a kernel-mode device driver component used by other malware to intercept and manipulate DNS queries, TCP/UDP connections, and other traffic. The malware can redirect DNS results and block network connections and traffic.
Manual removal is not recommended for this threat. Use Microsoft Security Essentials or another up-to-date scanning and removal tool to detect and remove this threat and other unwanted software from your computer. For more information on Microsoft security products, see
Follow us