TrendLabs Malware Blog
Glossary
TrendWatch
TrendLabs Twitter
WORM_KOOBFACE.D
Overview

Malware type: Worm

Aliases: No Alias Found

In the wild: Yes

Destructive: No

Language: English

Platform: Windows 98, ME, NT, 2000, XP, Server 2003

Encrypted: No

Overall risk rating:


Reported infections:

Damage potential:

High

Distribution potential:

High

Description: 

To get a one-glance comprehensive view of the behavior of this malware, refer to the Behavior Diagram shown below.

WORM_KOOBFACE.D Behavior Diagram

Malware Overview

This worm drops copies of itself. It drops files/components.

It displays a message box upon execution. It also accesses the a certain Web site to check for an Internet connection.

It connects to a certain Web site to send and receive information.

It checks if the user has visited the social networking site, Facebook and adds a link to the user's profile that points to a copy of this worm.

It deletes itself if the user has not visited the said social networking site.

For additional information about this threat, see:
Solution
Technical Details

Description created: Aug. 13, 2008 4:00:05 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.