Worm.Koobface

Worm.Koobface is a network-aware worm that attempts to duplicate itself across the existing network(s) and also can be used to hijack certain aspects of the users' web browser functionality (such as homepage, search page, and security settings). As liek most Worm applications, Worm.Koobface is a malicious program that spreads itself without any user intervention. Worm.Koobface can self-replicate, and tends to spread without attaching to or infecting other programs and files. Worm.Koobface can spread across computer networks via security exploits. Worm.Koobface can also spread through email by sending copies of itself to everyone in the user's address book. Worm.Koobface may consume a large amount of system resources and cause the machine to become noticeably sluggish and unreliable. The Worm.Koobface application is a widespread Online scam that targets users of the social networking sites Facebook and MySpace. Because of its ability to self-replicate, Worm.Koobface is considered a type of worm application. The user contracts the program by clicking on a link in their MySpace or Facebook profile page. The link appears to have come from a known contact and directs the victim to a website containing a second link, this one leading to a video file. The site claims that users who wish to view the video must download a specific codex or active-x object. The unsuspecting user then agrees, thereby downloading a malicious agent. Worm.Koobface then plants self-same links on the victims friends' pages. The objective of Worm.Koobface is to establish a botnet using Facebook and MySpace as modes of dispersion. A Botnet is a network of subjugate computers, called bots, that execute commands from a single source. A botnet is established when a program - like a worm - installs some command-line program, usually an IRC client. This client can log onto a channel and await orders which - once received - will be executed by the targeted computer. By using social network pages, the makers of Worm.Koobface hope to infect thousands of computers and thus create a massive Botnet that could be used for attacking servers (a DoS attack) or for conducing mass-mailing, spam events. It is highyl recommended to remove Worm.Koobface as soon as it has been detected.

Download Spyware Removal Tool to Remove* Worm.Koobface

Quick & tested solution for Worm.Koobface removal.
100% Free Scan for Windows

How to manually remove Worm.Koobface

Files associated with Worm.Koobface infection:

vmusbw32.dll
nnBOhWioHpG62R.exe
MgKPyEORiQUvGj.exe
aadrive32.exe
6DSS92c31Apgjk.exe
questscan143.exe
Photoshop.exe
netiepad.dll
ftppost2.exe
svrwsc.exe
itlnfw32.dll
Recycle.Bin.exe
gh5h166.exe
jjp155.exe
andy129.exe
mike148.exe
MakeTheWebBetter.exe
jjp156.exe
andy145.exe
andy143.exe
bill113.exe
bill115.exe
bill112.exe
bill110.exe
bill109.exe
bill108.exe
bill107.exe
bill106.exe
mrxoko.sys
imapioko.sys
sber20.exe
fbtre6.exe
bill104.exe
o6ko.sys
kenny17.exe
kenny14.exe
bill103.exe
freddy101.exe
Filter.sys
freddy80.exe
freddy81.exe
freddy54.exe
freddy37.exe
webserver.exe
pp14.exe
freddy79.exe
hippy16.exe
ld16.exe
pp13.exe
mstre26.exe
BrowserCtl.sys
pp11.exe
mstre21.exe
mstre25.exe
fio32.sys
mstre24.exe
freddy75.exe
mstre23.exe
freddy73.exe
freddy71.exe
freddy72.exe
tag14.exe
freddy60.exe
freddy56.exe
freddy48.exe
freddy39.exe
sber18.exe
freddy70.exe
freddy69.exe
ld06.exe
sber17.exe
freddy65.exe
freddy64.exe
freddy66.exe
restorer32_a.exe
ld15.exe
freddy67.exe
mstre22.exe
freddy63.exe
freddy61.exe
pp12.exe
nl15.exe
freddy62.exe
captcha7.dll
freddy59.exe
ld14.exe
freddy58.exe
freddy49.exe
ld12.exe
ld11.exe
ugo03.exe
abest.exe
PreInstaller[1].exe
16723754.exe
96733746.exe
16692344.exe
atom exit.exe
lphcvb7j0epbg.exe
pofokago.dll
efcdEuSj.dll
run.exe
KB123386.EXE
14945624.exe
94955616.exe
JavaCore.exe
ykiijcvp.dll
MDdccb.exe
17722954.exe
wvore.exe
ssqrSJYp.dll
lmkwovkh.dll
bndmss.exe
f9ssyypbuw.exe
92EF59.EXE
AMC.exe
SuSoft.exe
92410306.exe
12400314.exe
90255456.exe
10245464.exe
hdwf.exe
msupdt.exe
MD3d6b.exe
__c006C428.dat
_A00F481DE.exe
woyawizi.dll
hemodizi.dll
tikiyabu.dll
bepesata.dll
hgGwTnmk.dll
nukatojo.dll
vwva.exe
oell.exe
qgipz2469937.exe
r56ujxftyrsdjsxrgf46i5sgheh44.exe
winpad32.exe
bios.exe
nvsvc32.exe
X_Spruce.exe
Contraviro.exe
ContraviroInstall[1].exe
hjengine.dll
14147964.exe
94157956.exe
9F87A3.EXE
fisalunu.dll
ant_sr.dll
rru.exe
sysstem.exe
WebExcellenceAdviceTool.dll
~f9bd.tmp
drwt32.exe
sever.exe
paasypcqyvxhpdcx.dll
ybyxmtotthl.dll
17304414.exe
liser.exe
liser.dll
SurferClient.exe
msbcs.exe
iissrv.exe
ipuvoqububukuk.dll
opnnOiHW.dll
fevr.exe
bpitvjbkuryoe.dll
winsysrv.exe
{9ad1e5fc-2f85-c796-01a0-74aec6c37325}.dll
mc.exe dm=http://nocompromaat.com; ad=http://nocompromaat.com
killer_rodog.exe
vir-remover-pro[1].exe
virusremover.exe
vowtjs.exe
gghsehlusgqposyug.dll
784953.dll
uqawntfe.dll
iwvxlagu.dll
oondmaad.dll
oetfjink.dll
ocrbqpgd.dll
nxiucxfb.dll
cnihewjv.dll
leisytrf.dll
ffjetkxh.dll
lgjpursr.dll
mtoblvar.dll
47.tmp.exe
zeagaa.exe
vtUlMgGy.dll
psystem[1].exe
Trjscan.exe
ActiveScanz.exe
SiteAccess.dll
16140934.exe
18355614.exe
98365606.exe
93325616.exe
67ACF2.EXE
99926866.exe
19916874.exe
93789346.exe
13779354.exe
10639534.exe
90649526.exe
90598116.exe
10588124.exe
windupdates.exe
hiyusago.dll
__c0056ABA.dat
_A00F6A9D154.exe
aeemdnvp.dll
undubxnr.dll
pljybgiy.dll
fmmhvcat.dll
oesbbe.dll
WToolsA.exe
wupdt.exe
systb.dll
dsound3dd.dll
exp.exe
pascw.exe
SpywareBot.exe
~3.dll
protector.exe
~1.exe
wprcaw.exe
19353904.exe
99363896.exe
91457186.exe
11447194.exe
18058594.exe
winzz.exe
hjktvx.exe
Hyden.dll.exe
fsoaylml.sys
BILL~1.LII
nl.exe
ree1.exe
ree2.exe
gsf83iujid.dll
14973654.exe
94983646.exe
antit.dll
bittorrent.exe
nodlogin.exe
BDGuard.SYS
__c0084013.dat
crypt3232.dll
AntiSpyware Pro.exe
isadisk.sys
18563124.exe
96856706.exe
16846714.exe
99388276.exe
19378284.exe
afuya1119762.exe
RemoveWGA.exe
init.exe
lwinqldi.exe
PersonalWebIE_v1406.dll
cbXPJCSk.dll
lesaluhu.dll
feyiloto.dll
wtvmyakx.dll
hpmtoxvq.dll
nwarox.dll
ntomjwid.dll
Smart Antivirus-2009.exe
PAVRM.exe
SetupAdvancedVirusRemover[1].exe
defender32.exe
CcEvtSvc.exe
444.0
aziganoweturetoz.dll
hrzhhmpqli.dll
depirmny.exe
dllhost.exe
bixstmhn.dll
_A00FEBA65A.exe
xaavpocv.dll
kkzcbb.dll
nybioc.dll
iqlmviwc.dll
ihost.exe
14865934.exe
94875926.exe
BIJBEL~1.DLL
dgtxrdfxlw.dll
1204556042.dll
dmdvpnqfv.dll
dgtxrdfwrv.dll
dgtxrdfnfq.dll
dgtxrdfmdl.dll
dkxrstqxqp.dll
dkxrstqgmp.dll
1205044738.dll
drnpfdxfqd.dll
1205910046.dll
drnpfdxrqv.dll
drnpfdxlwn.dll
Nem.exe
1206376728.dll
kdftlboeopx.dll
kdftlboekae.dll
svpekgonpla.dll
kdftlboeorn.dll
drnpfdxwgv.dll
svpekgonnof.dll
VnrPack16.exe
X_Bat.exe
{92231ca8-6735-3805-6978-a81989a12c5c}.dll
214075.dll
jfkrgotvbl.dll
lotbiagfcnwfyt.dll
WindowsUpdate.scr
iexplore.exe
mehoheru.dll
rayefeku.dll
falozogi.dll
kunobesi.dll
hbgxcskv.dll
jwijtmho.dll
qfhhjktg.dll
rlrrouby.dll
awbvidpb.dll
cpexlhho.dll
ljJbaaWq.dll
qoMeedca.dll
fgkswlwb.dll
vtstu.dll
WODefragmenter.exe
WindOptimizer.exe
Dos%*0Optimizer.pif
ARCHPR.EXE
gpld1.exe
i[1].exe
pphc1kdj0elbj.exe
pphc1q9j0e5vc.exe
pphcr66j0e11c.exe
pphclpmj0e73r.exe
pphc31wj0e9ea.exe
pphcjuej0en4o.exe
pphcruaj0e355.exe
.tt89.tmp
pphcn3jj0epf7.exe
pphc38wj0e7er.exe
pphcn4nj0e58t.exe
pphcvmfj0e5a1.exe
pphc5bdj0ec4v.exe
rnqcylr.exe
rvdvgqdv.dll
1091644937.exe
699415262.exe
dmdvpnvmq.dll
dwrmntsklr.dll
dgtxrdfrmw.dll
1204014479.dll
1204138777.dll
codef.dll
xpa0803_en.exe
pgvknqnm.exe
wdahqpyd.exe
marwin32.dll
iuqrvxiiqzue.dll
gvtl.dll
nsu8E.dll
SysAgentSrv.exe
kyzuztq.dll
xxyvskbx.dll
rqRLdCvv.dll
grlxftr.dll
onatofat.exe
putosejo.dll
ekkadp.dll
bewoyewo.dll
ninegozu.dll
funeroga.dll
fugajezu.dll
kihipapo.dll
uliijd.dll
thbezm.dll
vgruik.dll
axonatuqicacepe.dll
tuvvmfee.dll
BN11.tmp
tzizz.exe
llwap.exe
iihon.exe
beggd.exe
nxhlx.exe
efcYQKde.dll
opnopQji.dll
geBqNhig.dll
qtmkg.exe
pmnoMgFW.dll
SrvCheck.dll
xcvghqni.exe
nse13.dll
fmectypymxa.dll
cjpqtxmnmgjsisbd.dll
exmxzftiqya.dll
nsd74A.dll
proto.dll
VistaDrive.exe
persistentLove.exe
winobb32.dll
wyyo.dll
wyyo.exe
explorer.exe
YAHOOM~1.EXE
9129837.exe
_A00F50F519.exe
vyefpfmh.dll
hkxqdwbq.exe
mharsxyt.exe
revkxadi.exe
fqjetcxm.exe
nctqlyds.exe
rgbchirk.exe
sjelcvad.exe
tqnknmfw.exe
efkpgpyf.exe
inudylen.exe
ofctitup.exe
pqrspmlq.exe
jojmrgdu.exe
wjalwrgl.exe
vmtmhuhc.exe
uhybkxen.exe
pgrabiva.exe
gjctitkx.exe
ejyjmlwr.exe
tejcxabw.exe
pchyjqtw.exe
nsdsnajk.exe
zojipsfi.exe
epajslul.exe
zmlonwlu.exe
repsrylq.exe
ie.exe
SearchAndDestroy.exe
Weather.exe
apsaxu.dll
kiasys.dll
winsurf.dll
iksagy.dll
apsaps.dll
tasant32.dll
apdoxu.dll
AntiSpywareShield.exe
ANTIVIR.exe
444.471
444.470
zumie.dll
pphcc4dj0epbv.exe
pphcpgsj0ega1.exe
BraveSentry.exe
Bat.dll
X_Batter.exe
AOL_security_toolbar.dll
mirc.exe
webhdll.dll
WinAntivirusPro.exe
wspwprtc.exe
setup_10014_509_.exe
jfytyo.dll
MWSBAR.DLL
snatodot.exe
czwzglcz.exe
ivspevej.exe
hmipcetg.dll
crybpufg.dll
reckhqks.dll
B.tmp
dbutil.dll
setup62.exe
219.tmp
xrt_jgmv.exe
aodnds.dll
pfad.dll
zycdex.dll
mttwfh.dll
fsrgeb.dll
mghefy.dll
zgtwfx.dll
ddserh.dll
ydggsx.dll
rfdswc.dll
jfdses.dll
zefdst.dll
jhfrxz.dll
cedafb.dll
hhrdxd.dll
zsdgff.dll
fmcvxy.dll
tdfhex.dll
xpa2008.exe
Power-Antivirus-2009.exe
IntelligentAdvisor-2.dll
vedxg6ame4.exe
CbEvtSvc.exe

Worm.Koobface DLL's to remove:

vmusbw32.dll
netiepad.dll
itlnfw32.dll
captcha7.dll
pofokago.dll
efcdEuSj.dll
ykiijcvp.dll
ssqrSJYp.dll
lmkwovkh.dll
woyawizi.dll
hemodizi.dll
tikiyabu.dll
bepesata.dll
hgGwTnmk.dll
nukatojo.dll
hjengine.dll
fisalunu.dll
ant_sr.dll
WebExcellenceAdviceTool.dll
paasypcqyvxhpdcx.dll
ybyxmtotthl.dll
liser.dll
ipuvoqububukuk.dll
opnnOiHW.dll
bpitvjbkuryoe.dll
{9ad1e5fc-2f85-c796-01a0-74aec6c37325}.dll
gghsehlusgqposyug.dll
784953.dll
uqawntfe.dll
iwvxlagu.dll
oondmaad.dll
oetfjink.dll
ocrbqpgd.dll
nxiucxfb.dll
cnihewjv.dll
leisytrf.dll
ffjetkxh.dll
lgjpursr.dll
mtoblvar.dll
vtUlMgGy.dll
SiteAccess.dll
hiyusago.dll
aeemdnvp.dll
undubxnr.dll
pljybgiy.dll
fmmhvcat.dll
oesbbe.dll
systb.dll
dsound3dd.dll
~3.dll
gsf83iujid.dll
antit.dll
crypt3232.dll
PersonalWebIE_v1406.dll
cbXPJCSk.dll
lesaluhu.dll
feyiloto.dll
wtvmyakx.dll
hpmtoxvq.dll
nwarox.dll
ntomjwid.dll
aziganoweturetoz.dll
hrzhhmpqli.dll
bixstmhn.dll
xaavpocv.dll
kkzcbb.dll
nybioc.dll
iqlmviwc.dll
dgtxrdfxlw.dll
1204556042.dll
dmdvpnqfv.dll
dgtxrdfwrv.dll
dgtxrdfnfq.dll
dgtxrdfmdl.dll
dkxrstqxqp.dll
dkxrstqgmp.dll
1205044738.dll
drnpfdxfqd.dll
1205910046.dll
drnpfdxrqv.dll
drnpfdxlwn.dll
1206376728.dll
kdftlboeopx.dll
kdftlboekae.dll
svpekgonpla.dll
kdftlboeorn.dll
drnpfdxwgv.dll
svpekgonnof.dll
{92231ca8-6735-3805-6978-a81989a12c5c}.dll
214075.dll
jfkrgotvbl.dll
lotbiagfcnwfyt.dll
mehoheru.dll
rayefeku.dll
falozogi.dll
kunobesi.dll
hbgxcskv.dll
jwijtmho.dll
qfhhjktg.dll
rlrrouby.dll
awbvidpb.dll
cpexlhho.dll
ljJbaaWq.dll
qoMeedca.dll
fgkswlwb.dll
vtstu.dll
rvdvgqdv.dll
dmdvpnvmq.dll
dwrmntsklr.dll
dgtxrdfrmw.dll
1204014479.dll
1204138777.dll
codef.dll
marwin32.dll
iuqrvxiiqzue.dll
gvtl.dll
nsu8E.dll
kyzuztq.dll
xxyvskbx.dll
rqRLdCvv.dll
grlxftr.dll
putosejo.dll
ekkadp.dll
bewoyewo.dll
ninegozu.dll
funeroga.dll
fugajezu.dll
kihipapo.dll
uliijd.dll
thbezm.dll
vgruik.dll
axonatuqicacepe.dll
tuvvmfee.dll
efcYQKde.dll
opnopQji.dll
geBqNhig.dll
pmnoMgFW.dll
SrvCheck.dll
nse13.dll
fmectypymxa.dll
cjpqtxmnmgjsisbd.dll
exmxzftiqya.dll
nsd74A.dll
proto.dll
winobb32.dll
wyyo.dll
vyefpfmh.dll
apsaxu.dll
kiasys.dll
winsurf.dll
iksagy.dll
apsaps.dll
tasant32.dll
apdoxu.dll
zumie.dll
Bat.dll
AOL_security_toolbar.dll
webhdll.dll
jfytyo.dll
hmipcetg.dll
crybpufg.dll
reckhqks.dll
dbutil.dll
aodnds.dll
pfad.dll
zycdex.dll
mttwfh.dll
fsrgeb.dll
mghefy.dll
zgtwfx.dll
ddserh.dll
ydggsx.dll
rfdswc.dll
jfdses.dll
zefdst.dll
jhfrxz.dll
cedafb.dll
hhrdxd.dll
zsdgff.dll
fmcvxy.dll
tdfhex.dll
IntelligentAdvisor-2.dll
aduic.dll
1.dll
a82sD246.dll
lgmxvpatfbo.dll
nldfmtapefs.dll
boqnrwdmfrp.dll
nogxfvbllna.dll
kvsdpfeagep.dll
wbxdpgfefse.dll
nfavxwdblpd.dll
kgxmotapqtm.dll
nfavxwdbdfm.dll
wnlmdakqfne.dll
wnlmdakqenv.dll
vmgspntbmaq.dll
dfmlxbpkbkl.dll
nkefbltdltv.dll
webtools.dll
compatu.dll
BtCoreI.dll
comaddi.dll
commdl.dll
cewmd.dll
3077ahntdksr[1].dll
ipro.dll
pxgdslro.dll
vregfwlx.dll
wpvmqosg.dll
sigma64.dll
asc94.dll
xvorfwbd.dll
z_view.dll
gnowmebk.dll
okmdepgb.dll
qegbdmwf.dll
hpi.dll
domie.dll
pntqkflv.dll
xokvrpwg.dll
Gtool.dll
wnslvxtf.dll
eqvwamkl.dll
vtqnxfko.dll
videoa32.dll
tsxngabr.dll
drvvoj.dll
rqbmvpso.dll
pdoskegl.dll
dgksvbpn.dll
supsafe.dll
ns28kut1.dll
qipauzax.dll
winpi77.dll
winnl77.dll
sfuedqyv.dll
klqvlb.dll
lhtjmj.dll
mozvtz.dll
nsqpuh.dll
stejna.dll
vcwdcvdg.dll
tzobbx.dll
ttrnpt.dll
uhnkgxkk.dll
jhglhv.dll
vqftcx.dll
odutce.dll
itnsxo.dll
ausfnybssw.dll
gzmrotate.dll
xwcfcpelis.dll
azdjmlrkbftv.dll
thbvnxmagspsjirn.dll
zqiloafakvi.dll
kxmjmclwvlfa.dll
etsejmujtw.dll
pwakdnwqmdesytpg.dll
zicsgkbpowpcwma.dll
ynjricyzpbcbk.dll
lgejewpdkhcpfvpt.dll
hqqxssqhgdi.dll
kdftlboeswk.dll
svpekgonlop.dll
iesearch.dll
svpekgonrlo.dll
svpekgongpv.dll
temlxopqaqg.dll
temlxopqwsp.dll
temlxopqqem.dll
nslbvxpgrno.dll
nslbvxpgtkn.dll
qnmargolqgp.dll
qnmargolbve.dll
qnmargolwog.dll
qnmargolgnm.dll
qvlbodmnmle.dll
nldfmtapnvb.dll
boqnrwdmstg.dll
boqnrwdmkrs.dll
boqnrwdmrdv.dll
boqnrwdmqed.dll
ksendlbtdpl.dll
kgqfweltdeg.dll
kgqfwelttko.dll
gfetqaxsbfk.dll
gfetqaxsrob.dll
ksendlbtxqd.dll
wbxdpgfevkl.dll
kgxmotapexd.dll
rodqgpvlkoa.dll
vanwxemgfwn.dll
vanwxemgtro.dll
vanwxemgaet.dll
qnmargolktr.dll
vanwxemgvdp.dll
bdgmioxx.dll
bumeniyi.dll
topupabe.dll
puwukehe.dll
hjxigp.dll
bedihidu.dll
znwrup.dll
bafoline.dll
pikekise.dll
bobebeji.dll
woyohipo.dll
magagovi.dll
xgrfng.dll
komaziza.dll
folopaga.dll
tibufenu.dll
rotatopu.dll
heredetu.dll
wefovuzi.dll
pakurowe.dll
wahezelo.dll
mivohilu.dll
juvoguru.dll
batiweja.dll
vujikuro.dll
zksjwt.dll
pwqupysn.dll
jimarofi.dll
bigivofo.dll
siyipino.dll
lonayemu.dll
yofiyuya.dll
pgkhct.dll
byXRLFYR.dll
efcCvTjH.dll
edeluhsn.dll
pyqxdnom.dll
mhhaykxq.dll
xavvvcou.dll
jbgqbkkd.dll
tmpokmgp.dll
zejuwuko.dll
fimohinu.dll
guyuzera.dll
pufuyada.dll
dayoyadu.dll
dpuppl.dll
fizukodi.dll
kagogomi.dll
tupemawu.dll
pidokofu.dll
atgban.dll
kreirgoa.dll
gtxepaus.dll
myxwrcbc.dll
hyduqkpl.dll
dqxexhcq.dll
wgigntqr.dll
mmhibixa.dll
cxjfvdio.dll
whjswuhp.dll
oiexpppu.dll
nsnoiryo.dll
jpwcecbs.dll
gnjhoebf.dll
voeqbcmm.dll
ujlfhuts.dll
fardlitf.dll
arcjamnp.dll
rqRJbCsP.dll
bilywcvv.dll
cdrhpfqn.dll
egkilyns.dll
aydmyikm.dll
cfmyaabd.dll
tueugsmf.dll
ufuoohei.dll
mfgdwttx.dll
doytfhxl.dll
nrmyfihy.dll
jmeunffk.dll
usxfxxsy.dll
lifrxibo.dll
wgmxmdpv.dll
dprbnxwc.dll
uamdexdq.dll
vfxoodww.dll
wolvdbsx.dll
fvjkokjw.dll
adowarru.dll
epmpioyj.dll
lufsmufa.dll
nwptifru.dll
lmagsqoi.dll
cbcecopw.dll
ysbnxjoi.dll
jhcubtjm.dll
khsinuro.dll
ogljmkua.dll
qtoowonx.dll
chkhgydm.dll
qhuaqvpl.dll
ifczvg.dll
labtkekw.dll
vypvdbnc.dll
uopiujke.dll
yujodytr.dll
frxojarl.dll
jbqnmdyr.dll
htgnkqft.dll
kupnoc.dll
djbfkdax.dll
qujalwxc.dll
bghmniui.dll
nixddl.dll
vcfocuut.dll
jxlqgxqm.dll
kfduak.dll
nvucnahw.dll
sdpltjje.dll
eqphbydp.dll
eytbox.dll
foxynhhp.dll
hjqastkj.dll
bvkavllr.dll
pswqcxvo.dll
jtvknq.dll
itfdyl.dll
rdfmwlvo.dll
vmtlkbjk.dll
dpkjljgn.dll
morcol.dll
stuqektd.dll
gngqxy.dll
tdxoqmnn.dll
oxyvinhl.dll
domutq.dll
wyjenl.dll
lkukysbh.dll
wcjnvwkh.dll
jaygegnf.dll
tjlbbrst.dll
ognftt.dll
ifmwinun.dll
xpippphy.dll
simnmlfx.dll
brkgknsg.dll
rovvltmr.dll
hammxvti.dll
tqjwmejh.dll
stnkjgdo.dll
mnwdftgj.dll
usajuyih.dll
opyxwjwx.dll
mhtvtadn.dll
fdflwkkl.dll
ofqwqxjn.dll
cvrbxnhm.dll
xqnowf.dll
whckskgs.dll
dhbfjtjb.dll
ghstynmd.dll
plowspra.dll
jlrkowck.dll
xkmwjfhy.dll
hngynlgm.dll
vljeqe.dll
vmwcaz.dll
nveefrin.dll
uoefaiaw.dll
yvdgof.dll
flqwatgi.dll
cfyqgy.dll
ijvtlbmi.dll
qjkhaqjy.dll
zztlkl.dll
ywoolgcs.dll
pmwebdla.dll
smsumcqp.dll
ofwfaodw.dll
nqqqgnay.dll
hiexsojp.dll
ngjgcxwv.dll
lchqjwng.dll
yrbqlmrj.dll
zzzvyj.dll
pgpwketa.dll
dsgchauj.dll
kzddpd.dll
vtbdqi.dll
okgvrv.dll
jxggsp.dll
urvvrevf.dll
vvcjidiw.dll
qhpwpkpe.dll
sikgpg.dll
qcwcbypw.dll
njmxdjfj.dll
nvrxxael.dll
qvslys.dll
bijjtmmb.dll
xkfacf.dll
hhluym.dll

Worm.Koobface processes to kill:

nnBOhWioHpG62R.exe
MgKPyEORiQUvGj.exe
aadrive32.exe
6DSS92c31Apgjk.exe
questscan143.exe
Photoshop.exe
ftppost2.exe
svrwsc.exe
Recycle.Bin.exe
gh5h166.exe
jjp155.exe
andy129.exe
mike148.exe
MakeTheWebBetter.exe
jjp156.exe
andy145.exe
andy143.exe
bill113.exe
bill115.exe
bill112.exe
bill110.exe
bill109.exe
bill108.exe
bill107.exe
bill106.exe
sber20.exe
fbtre6.exe
bill104.exe
kenny17.exe
kenny14.exe
bill103.exe
freddy101.exe
freddy80.exe
freddy81.exe
freddy54.exe
freddy37.exe
webserver.exe
pp14.exe
freddy79.exe
hippy16.exe
ld16.exe
pp13.exe
mstre26.exe
pp11.exe
mstre21.exe
mstre25.exe
mstre24.exe
freddy75.exe
mstre23.exe
freddy73.exe
freddy71.exe
freddy72.exe
tag14.exe
freddy60.exe
freddy56.exe
freddy48.exe
freddy39.exe
sber18.exe
freddy70.exe
freddy69.exe
ld06.exe
sber17.exe
freddy65.exe
freddy64.exe
freddy66.exe
restorer32_a.exe
ld15.exe
freddy67.exe
mstre22.exe
freddy63.exe
freddy61.exe
pp12.exe
nl15.exe
freddy62.exe
freddy59.exe
ld14.exe
freddy58.exe
freddy49.exe
ld12.exe
ld11.exe
ugo03.exe
abest.exe
PreInstaller[1].exe
16723754.exe
96733746.exe
16692344.exe
atom exit.exe
lphcvb7j0epbg.exe
run.exe
14945624.exe
94955616.exe
JavaCore.exe
MDdccb.exe
17722954.exe
wvore.exe
bndmss.exe
f9ssyypbuw.exe
AMC.exe
SuSoft.exe
92410306.exe
12400314.exe
90255456.exe
10245464.exe
hdwf.exe
msupdt.exe
MD3d6b.exe
_A00F481DE.exe
vwva.exe
oell.exe
qgipz2469937.exe
r56ujxftyrsdjsxrgf46i5sgheh44.exe
winpad32.exe
bios.exe
nvsvc32.exe
X_Spruce.exe
Contraviro.exe
ContraviroInstall[1].exe
14147964.exe
94157956.exe
rru.exe
sysstem.exe
drwt32.exe
sever.exe
17304414.exe
liser.exe
SurferClient.exe
msbcs.exe
iissrv.exe
fevr.exe
winsysrv.exe
killer_rodog.exe
vir-remover-pro[1].exe
virusremover.exe
vowtjs.exe
47.tmp.exe
zeagaa.exe
psystem[1].exe
Trjscan.exe
ActiveScanz.exe
16140934.exe
18355614.exe
98365606.exe
93325616.exe
99926866.exe
19916874.exe
93789346.exe
13779354.exe
10639534.exe
90649526.exe
90598116.exe
10588124.exe
windupdates.exe
_A00F6A9D154.exe
WToolsA.exe
wupdt.exe
exp.exe
pascw.exe
SpywareBot.exe
protector.exe
~1.exe
wprcaw.exe
19353904.exe
99363896.exe
91457186.exe
11447194.exe
18058594.exe
winzz.exe
hjktvx.exe
Hyden.dll.exe
nl.exe
ree1.exe
ree2.exe
14973654.exe
94983646.exe
bittorrent.exe
nodlogin.exe
AntiSpyware Pro.exe
18563124.exe
96856706.exe
16846714.exe
99388276.exe
19378284.exe
afuya1119762.exe
RemoveWGA.exe
init.exe
lwinqldi.exe
Smart Antivirus-2009.exe
PAVRM.exe
SetupAdvancedVirusRemover[1].exe
defender32.exe
CcEvtSvc.exe
depirmny.exe
dllhost.exe
_A00FEBA65A.exe
ihost.exe
14865934.exe
94875926.exe
Nem.exe
VnrPack16.exe
X_Bat.exe
iexplore.exe
WODefragmenter.exe
WindOptimizer.exe
gpld1.exe
i[1].exe
pphc1kdj0elbj.exe
pphc1q9j0e5vc.exe
pphcr66j0e11c.exe
pphclpmj0e73r.exe
pphc31wj0e9ea.exe
pphcjuej0en4o.exe
pphcruaj0e355.exe
pphcn3jj0epf7.exe
pphc38wj0e7er.exe
pphcn4nj0e58t.exe
pphcvmfj0e5a1.exe
pphc5bdj0ec4v.exe
rnqcylr.exe
1091644937.exe
699415262.exe
xpa0803_en.exe
pgvknqnm.exe
wdahqpyd.exe
SysAgentSrv.exe
onatofat.exe
tzizz.exe
llwap.exe
iihon.exe
beggd.exe
nxhlx.exe
qtmkg.exe
xcvghqni.exe
VistaDrive.exe
persistentLove.exe
wyyo.exe
explorer.exe
9129837.exe
_A00F50F519.exe
hkxqdwbq.exe
mharsxyt.exe
revkxadi.exe
fqjetcxm.exe
nctqlyds.exe
rgbchirk.exe
sjelcvad.exe
tqnknmfw.exe
efkpgpyf.exe
inudylen.exe
ofctitup.exe
pqrspmlq.exe
jojmrgdu.exe
wjalwrgl.exe
vmtmhuhc.exe
uhybkxen.exe
pgrabiva.exe
gjctitkx.exe
ejyjmlwr.exe
tejcxabw.exe
pchyjqtw.exe
nsdsnajk.exe
zojipsfi.exe
epajslul.exe
zmlonwlu.exe
repsrylq.exe
ie.exe
SearchAndDestroy.exe
Weather.exe
AntiSpywareShield.exe
ANTIVIR.exe
pphcc4dj0epbv.exe
pphcpgsj0ega1.exe
BraveSentry.exe
X_Batter.exe
mirc.exe
WinAntivirusPro.exe
wspwprtc.exe
setup_10014_509_.exe
snatodot.exe
czwzglcz.exe
ivspevej.exe
setup62.exe
xrt_jgmv.exe
xpa2008.exe
Power-Antivirus-2009.exe
vedxg6ame4.exe
CbEvtSvc.exe
CdbgEvtSvc.exe
lphcvdfj0epm7.exe
renabcom4.exe
pcntmtdl.exe
VirusRemover2008_Setup_Dual_en[2].exe
QdrPack15.exe
GetModule19.exe
VnrPack18.exe
Skra.exe
b104.exe
Dot1XCfg.exe
winupdate.exe
wserving.exe
Firewall.exe
nabmlare.exe
edwnghyb.exe
tujwbkbm.exe
nod32se.exe
ati2evxx.exe
sbsm.exe
sbmntr.exe
scm.exe
ubodh.exe
TXPlatform.exe
8764.exe
setup73.exe
xpupdate.exe
lahmtcho.exe
maxpaynow.exe
wdarqxox.exe
jiryrclc.exe
qbynahkr.exe
lphcamlj0ea8a.exe
_A00F299C205.exe
video.avi[1].exe
664575600.exe
_A00F265D3B.exe
rnbqp.exe
npqtsrak.exe
scit.exe
mdyvgtwp.exe
epmbulun.exe
gfwrcbmx.exe
ovwpshwz.exe
wzufifcx.exe
_A00F52ECE1.exe
_A00F189CC1B.exe
jerafctu.exe
_A00F3ECB0D8F.exe
_A00F4D8F7.exe
fbxhs.exe
QdrPack14.exe
xpscanner.exe
xpa1503_en.exe
90839366.exe
17236094.exe
lwinkmdt.exe
dwdsrngt.exe
NoDNS.exe
gamevance32.exe
bkhujyxs.exe
Antivirus Plus.exe
xpa_eng.exe
xlejc.exe
svobqjwt.exe
msnmsg.exe
kjwbunaf.exe
Msg.exe
city acid.exe
Msmsgs.exe
kjdsrngj.exe
upload dart.exe
unmlcrmn.exe
apuvmjkf.exe
kbulapet.exe
ryfuhize.exe
97246086.exe
11120624.exe
1361538659.exe
lphc3h7j0er4g.exe
tdydowkc.exe
noytcyr.exe
wsldoekd.exe
13213434.exe
93223426.exe
mjso.exe
sih.exe
ContraVirusPro.exe
18163.exe
RDPlatinumv5.exe
pm_proc2.exe
vedxg4am1et2.exe
TSCHelp.exe
aspimgr.exe
resfilter32.exe
nnrun.exe
13059684.exe
93069676.exe
Extra Software.exe
wpv451242765100.exe
17170004.exe
Spyware-Secure_repaironce.exe
Adware_Pro.exe
1115687155.exe
1267284512.exe
1345400504.exe
10024412.exe
1814827421.exe
1446255078.exe
mupd1_2_1931888.exe
VnrPack23.exe
GetModule31.exe
GetModule26.exe
VnrBlock20.exe
roytctm.exe
acctresr.exe
aamd532d.exe
saiuwwl.exe
ecx.exe
hvccs.exe
fechme.exe
nsxflo.exe
qkjp.exe
XPSecurityCenter.exe
uwasdc.exe
zango.exe
RegFixPro.exe
gbiesrv.exe
netfx20.exe
dmgmi.exe
TND.exe
akl.exe
NBAW.exe
HFBL.exe
system32EFQX.exe
EVDP.exe
fmsiocps.exe
kvliprie.exe
q041wz8.exe
winlognn.exe
winlogan.exe
retadpu922.exe
mrofinu72.exe
lphc7g8j0ev0t.exe
lphc93oj0egev.exe
lphc1ppj0ec9j.exe
lphccn4j0eadc.exe
lphcj74j0ec75.exe
lphc3gsj0e95n.exe
lphcvttj0e93g.exe
lphccr5j0e90g.exe
lphccmjj0ej4g.exe
lphcnjrj0e78c.exe
lphcrj3j0ee8j.exe
lphc30rj0egd7.exe
lphcc2ej0e71t.exe
lphcpkgj0e98r.exe
lphcalbj0eec1.exe
lphc3gfj0ej87.exe
lphc9maj0e7dn.exe
lphcn6lj0e1b9.exe
lphc3coj0er1a.exe
lphceltj0e52n.exe
lphc1lbj0eef1.exe
lphca90j0et3p.exe
lphcgl1j0ev09.exe
lphcp27j0eg75.exe
rhcjgjj0ecfp.exe
lphcn4mj0ec8j.exe
lphcjosj0erb7.exe
lphc9vcj0e16n.exe
lphcctsj0ec75.exe
winds32.exe
shcvw0j0egna.exe
ajixmghia.exe
wind32.exe
maxpaynow1.exe
ctfmona.exe
sysrest32.exe
taskmon.exe
BluetoothAuthorizationAgent.exe
k.exe
wpv091242765100.exe
wpv101242765100.exe
1ztwvzh.exe
orkutkut.exe
402792673.exe
22497.exe
440059563.exe
xrt_ojgr.exe
xrt_jdks.exe
video1152.cfg.exe
lphcamfj0evag.exe
q2l0zaatdu.exe
8eac5uw1z0.exe
afmw1bft9by.exe
mjsgrclw20vm.exe
1uw0wo.exe
1a.exe
amb1avl.exe
klbk.exe
mdm.exe
nlqouecs.exe
HotbarSA.exe
eedtaeop.exe
_A00F6A691D47.exe
head2.exe
SBUSA.exe
ZangoSA.exe
salm.exe
SpyLocked 3.6.exe
1855199700.exe
32209.exe
groupmanager.exe

Remove Worm.Koobface registry entries:

HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ RTHDBPL
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ pp
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ restorer32_a
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ sysberay2
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ sysbetray2
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ sysfbtray
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ sysftray2
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ syshitray2
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ sysldtray
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ sysmstray
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ sysnltray2
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ systgray2
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ systray
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\apto6ko
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\browserctldrv
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Filter
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\fio32
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\o6ko
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ql600oko
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\webserver
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\websrvx
MICROSOFT\WINDOWS\CURRENTVERSION\RUN\GetModule25
MICROSOFT\WINDOWS\CURRENTVERSION\RUN\sysfbtray
MICROSOFT\WINDOWS\CURRENTVERSION\RUN\sysftray2
MICROSOFT\WINDOWS\CURRENTVERSION\RUN\sysldtray
RUNNING PROGRAM\bill103.exe
RUNNING PROGRAM\Explorer.EXE
RUNNING PROGRAM\freddy37.exe
RUNNING PROGRAM\freddy54.exe
RUNNING PROGRAM\ld08.exe
RUNNING PROGRAM\pp1.exe
RUNNING PROGRAM\pp10.exe
RUNNING PROGRAM\pp12.exe
RUNNING PROGRAM\SYSDLL.exe

Comments

Chris Mar 10, 2010
The way this is set up is almost PERFECT for people with little tech experience. Could you, would you please post a step by step for people like me who have NO experience? When you say "PROCESS TO KILL, etc.. cold you show me how?" No, I am not too stupid to OWN a computer, I have just never owned one before....
ericka Mar 22, 2010
Can you explain step by step what one should do to remove these files.where would these files b located?

Post comment — WE NEED YOUR OPINION!