Forum Home
Press F1
 
Thread ID: 100439 2009-06-07 23:04:00 Koobface facebook worm - Gobe1 (6290) Press F1
Post ID Timestamp Content User
780473 2009-06-07 23:22:00 Im wondering if something like this might have helped now

support.microsoft.com

Alows a regedit to manually remopve the script for activation, has anyone tried this?
Gobe1 (6290)
780474 2009-06-07 23:24:00 Thanks Zapperboy, i will check them out

Edit:
Thanks everyone, i tried a search on here for koobface and found nothing so at least people will be able to find a little help.
If you have defeated this worm chuck in your method for future readers..

Cheers
Gobe1 (6290)
780475 2009-06-07 23:30:00 Don't bother with enclosures. Slave it or get a USB to SATA/IDE adapter from trademe for around 25.

Scan with Eset online scanner

Blam
Blam (54)
780476 2009-06-07 23:41:00 You HAVE to disable system restore, with something like this. Depending on which variant it was (if there's more than 1), this (www.symantec.com) may have helped

If its been fixed now, I would change ALL passwords, esp if this PC was used for online banking
Speedy Gonzales (78)
780477 2009-06-07 23:51:00 Thanks Speedy, i didnt think of the passwords, i have just let my nephew know. Cheers Gobe1 (6290)
1 2