The Koobface threat is also the subject of many hoax warnings designed to trick social networking users into spreading misinformation across the Internet. Various anti-scam websites such as Snopes.com and ThatsNonsense.com have recorded many instances where alarmist messages designed to fool and panic Facebook users have began to circulate prolifically using the widely publicized Koobface threat as bait.<14><15> Popular examples are the "Barack Obama-Clinton Scandal" hoax which was popular in 2010.
Other misconceptions have spread regarding the Koobface threat, including the false assertion that accepting "hackers" as Facebook friends will infect a victim's computer with Koobface, or that Facebook applications are themselves Koobface threats. These claims are untrue. Other rumours assert that Koobface is much more dangerous than other examples of malware and has the ability to delete all of your computer files and "burn your hard disk." However, these rumours are inspired by earlier fake virus warning hoaxes and remain false.<16>
http://en.wikipedia.org/wiki/KoobfaceW32.Koobface.DRisk Level 1: Very Low
Discovered: August 7, 2009
Updated: August 8, 2009 1:32:06 AM
Also Known As: WORM_KOOBFACE.V
Type: Worm
Infection Length: 16,384 bytes
Systems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows Vista, Windows NT, Windows Server 2003, Windows 2000 W32.Koobface.D is a worm that spreads through social networking sites. It also sends confidential information to a remote location.
For more information, please see the following resources:
W32.Koobface
Antivirus Protection DatesInitial Rapid Release version August 7, 2009 revision 051
Latest Rapid Release version November 17, 2010 revision 025
Initial Daily Certified version August 8, 2009 revision 003
Latest Daily Certified version November 18, 2010 revision 002
Initial Weekly Certified release date August 12, 2009
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat AssessmentWildWild Level: Low
Number of Infections: 0 - 49
Number of Sites: 0 - 2
Geographical Distribution: Low
Threat Containment: Easy
Removal: Easy
http://www.symantec.com/security_response/writeup.jsp?docid=2008-080315-0217-99The worm is able to perform the following functions:
Spread through social networks
Steal confidential information
Inject advertising into web browsers
Redirect web browsing to malicious sites
Intercept Internet traffic
Block access to certain Internet sites
Start a web server to serve as a command and control server for other Koobface infections
Download additional files, such as updates to itself and other pay-per-install software that includes fake security products
Steal software license keys
Break CAPTCHAs
Determine if a link is blocked by Facebook
Create new Blogspot accounts and pages
Modify the Hosts file
Have a good anti-virus ansd malware program and the sweat is minimal.