Koobface.EA

Common name:
Koobface.EA
Technical name:
W32/Koobface.EA.worm
Threat level:
Medium
Alias:
Net-Worm.Win32.Koobface.aub,
Type:
Worm
Effects:
Its main aim is to spread itself via the social network Facebook and affect as many computers as possible. It downloads and installs in the computer a fake antivirus program that warns users of unexisting threats.
Affected platforms:
Windows 2003/XP/2000/NT/ME/98/95
First detected on:
July 20, 2009
Detection updated on:
July 27, 2009
Statistics
No
Brief Description

Koobface.EA is a worm whose main aim is to spread itself via the social network Facebook and affect as many computers as possible.
Additionally, it downloads and installs in the computer a fake antivirus program that warns users of unexisting threats, so that they pay for a certain security solution.
Visible Symptoms

Koobface.EA is easy to recognize, as it spreads via the social network Facebook:
It publishes a video like the following in the home page of the user:


If the link is followed, users are redirected to a website that imitates YouTube's, where the video can be viewed.
However, in order to view the video, an Adobe Flash Player update is required:


.