How to remove Koobface

Thursday, December 11th, 2008 at 9:27 am
Home » Worm » Koobface

Koobface description

Koobface is dangerous malware. Koobface attacks social networks, especially facebook.com. It also targets users of bebo.com, myyearbook.com, blackplanet.com, myspace.com and friendster.com.

Koobface infects a profile and sends a message to all friends via social network messaging system linking to a fake video. Whoever gets interested in the movie clip, he/she is urged to update Flash player. The update is actually a copy of Koobface worm.

How to manually remove Koobface

To remove Koobface spyware you must block Koobface sites, stop and remove processes, unregister DLL files, search and delete all other Koobface files and registry utility. Follow the Koobface detection and removal instructions below.

The most typical software removal method is to remove Koobface by using "Add or Remove Programs" service. However there may be hidden Koobface files, running processes and registries in your computer, so Koobface may recreate all other files after reboot.

Koobface manual removal instructions

Stop and remove Koobface processes:
fbtre6.exe
mstre6.exe
Read more how to kill Koobface processes

Locate and delete Koobface registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run\"systray" = "c:\windows\mstre6.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run\"systray" = "C:\Windows\fbtre6.exe"
HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\Navigating
Read more how to delete Koobface registry entries
Download RegistryBooster 2010 to scan errors caused by Koobface

Detect and delete other Koobface files:
C:\Windows\fbtre6.exe
C:\Windows\fmark2.dat
mstre6.exe

We strongly recommend you to use spyware remover to track Koobface and automaticaly remove Koobface processes, registries and files as well as other spyware threats.

Download does not start? Try a mirror download here

Tags: , ,

One Response to

Koobface

Trackbacks

Leave a Reply

Download does not start? Try a mirror download here