Wednesday, December 8, 2010

koobface removal - facebook virus

for those of you who caught the facebook virus: it's called koobface and here are the instructions to manually delete it...


Manual Removal of Koobface Virus:
1 – Kill these processes:
fbtre6.exe
mstre6.exe

2 – Delete these registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run\”systray” = “c:\windows\mstre6.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run\”systray” = “C:\Windows\fbtre6.exe”
HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\Navigating

3 – Delete these files:
C:\\Windows\\fbtre6.exe
C:\\Windows\\fmark2.dat

No comments:

Post a Comment