W32.Koobface.B

W32.Koobface.B is a very malicious and devious worm which is spread via social networking sites such as Facebook and MySpace. This is how the Koobface.B Worm operates: W32.Koobface.B targets Facebook users by creating spam messages and sending them to the infected users's friends via the Facebook site. The messages and comments include the following texts: "Paris Hilton Tosses Dwarf On The Street," "Examiners Caught Downloading Grades From The Internet," "You must see it!!! LOL. My friend catched you on hidden cam," "Is it really celebrity? Funny Moments," and many others. Messages and comments on MySpace and Facebook include links to youtube.[skip].pl. If the user clicks on this link, they are redirected to youtube.[skip].ru, a site which purportedly contains a video clip. If the user tries to watch the video, a message will appear stating that they need the latest version of Flash Player in order to watch the clip. However, instead of the latest version of Flash Player, a file called codecsetup.exe is downloaded to the users's machine; this file is also a network worm.

Koobface.B Worm is very deceptive and clever because users ordinarily trust messages left by "friends" on social networking sites so the probability of you clicking on the link is high. Koobface.B Worm fiendishly preys on this user vulnerability. Once the W32.Koobface.B begins to run, it configures itself to run automatically whenever the system starts, checks for MySpace cookies, and then if it finds them, modifies your profile by adding links to malevolent sites that contain the worm. Avoid clicking on funny video links from unknown MySpace or Facebook users.