W32/Koobface-Q
Posted: November 6, 2009
Threat Metric
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
Threat Level: | 5/10 |
---|---|
Infected PCs: | 6,469 |
First Seen: | July 24, 2009 |
---|---|
Last Seen: | May 24, 2022 |
OS(es) Affected: | Windows |
W32/Koobface-Q is a malicious worm from the notorious Win32 stable that affects computers connected to a network running Windows 95/98/Me and Windows NT/2000 operating systems. W32/Koobface-Q spreads by using Windows networking APIs, MAPI functions or email clients such as Microsoft Outlook. W32/Koobface-Q can also create email messages with a dangerous worm program attached to it. A message created by a worm often suggests that the recipient should launch the attachment to see something interesting or important. W32/Koobface-Q contains all the characteristics of an identified security risk and should be removed if detected.
Aliases
More aliases (3069)
Technical Details
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.
The following files were created in the system:%WINDIR%\system32\swe.dll
File name: swe.dllSize: 64.51 KB (64512 bytes)
MD5: b008856fa107fb14dbfb01ac4bc7ff0a
Detection count: 1,426
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\system32
Group: Malware file
Last Updated: November 8, 2010
%WINDIR%\system32\drivers\PDRV.sys
File name: PDRV.sysSize: 39.29 KB (39296 bytes)
MD5: 07e86b47b742f78855ea14b68f4b6fea
Detection count: 1,183
File type: System file
Mime Type: unknown/sys
Path: %WINDIR%\system32\drivers
Group: Malware file
Last Updated: September 7, 2010
%WINDIR%\system32\mas.dll
File name: mas.dllSize: 49.15 KB (49152 bytes)
MD5: 0ca69d528f881daf9553dd969b16a276
Detection count: 1,091
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\system32
Group: Malware file
Last Updated: November 9, 2010
%WINDIR%\system32\drivers\mas.sys
File name: mas.sysSize: 28.03 KB (28032 bytes)
MD5: 2428166634a56621d224f2f8883ebb0d
Detection count: 1,031
File type: System file
Mime Type: unknown/sys
Path: %WINDIR%\system32\drivers
Group: Malware file
Last Updated: November 9, 2010
%APPDATA%\SystemProc\lsass.exe
File name: lsass.exeSize: 79.36 KB (79360 bytes)
MD5: 714fdafb2028b4c06ce8cef5691b081f
Detection count: 162
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\SystemProc
Group: Malware file
Last Updated: September 14, 2010
%programfiles%\webserver\webserver.exe
File name: webserver.exeSize: 14.33 KB (14336 bytes)
MD5: eeda586b324d69ebf6b537724ad122cb
Detection count: 91
File type: Executable File
Mime Type: unknown/exe
Path: %programfiles%\webserver
Group: Malware file
Last Updated: September 15, 2010
%windir%\system32\fio32.dll
File name: fio32.dllSize: 50.68 KB (50688 bytes)
MD5: c1448afa4012e692b85c2755a112c33c
Detection count: 90
File type: Dynamic link library
Mime Type: unknown/dll
Path: %windir%\system32
Group: Malware file
Last Updated: September 15, 2010
bill107.exe
File name: bill107.exeSize: 74.24 KB (74240 bytes)
MD5: 3325f9fdcdcf36a02b6a8f2ee525041a
Detection count: 86
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: April 27, 2010
bill110.exe
File name: bill110.exeSize: 77.31 KB (77312 bytes)
MD5: 4fb5e6eea077e43c95c65f072c608c91
Detection count: 86
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: May 18, 2010
bill109.exe
File name: bill109.exeSize: 72.7 KB (72704 bytes)
MD5: da5bbe0812987119fdcb282fe08c53b2
Detection count: 85
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: May 18, 2010
bill109.exe
File name: bill109.exeSize: 74.75 KB (74752 bytes)
MD5: 7e35f37167c894c5b4a9c29a1648dcf2
Detection count: 84
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: May 18, 2010
%PROGRAMFILES%\webserver\webserver.exe
File name: webserver.exeSize: 13.31 KB (13312 bytes)
MD5: 5e2754aadeeb72fce607726dec81b350
Detection count: 75
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\webserver
Group: Malware file
Last Updated: October 28, 2010
bill110.exe
File name: bill110.exeSize: 79.87 KB (79872 bytes)
MD5: 7dea858c6530e5875cd59d4bd6df1efd
Detection count: 73
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: June 3, 2010
bill110.exe
File name: bill110.exeSize: 58.36 KB (58368 bytes)
MD5: 1beb0cc256f81a2282d3915cfee0ee1d
Detection count: 72
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: June 3, 2010
%WINDIR%\system32\certoko.dll
File name: certoko.dllSize: 128 KB (128000 bytes)
MD5: 9392b9eaab4b07b1b1696f350caf7397
Detection count: 42
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\system32
Group: Malware file
Last Updated: October 28, 2010
bill110.exe
File name: bill110.exeSize: 78.84 KB (78848 bytes)
MD5: f213646644b5943766db430f3ade0a27
Detection count: 40
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: May 25, 2010
bill112.exe
File name: bill112.exeSize: 76.28 KB (76288 bytes)
MD5: b3be5e20e18f3c28c56a902b9e13a88c
Detection count: 30
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: June 29, 2010
%WINDIR%\SysWOW64\drivers\PDRV.sys
File name: PDRV.sysSize: 48.12 KB (48128 bytes)
MD5: 2e04cdb6a5c912acfa21946c8d8b1ec2
Detection count: 23
File type: System file
Mime Type: unknown/sys
Path: %WINDIR%\SysWOW64\drivers
Group: Malware file
Last Updated: December 7, 2010
%PROGRAMFILES%\webserver\webserver.exe
File name: webserver.exeSize: 14.84 KB (14848 bytes)
MD5: 989db2f4fcda61a6fea51be24459c2b4
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\webserver
Group: Malware file
Last Updated: October 28, 2010
%WINDIR%\system\svchost.exe
File name: svchost.exeSize: 40.44 KB (40448 bytes)
MD5: 55d39b196e1ac496a355e9bc16de3ba1
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system
Group: Malware file
Last Updated: November 2, 2010
More files
Registry Modifications
File name without pathld14.exeRun keysCaptcha7
Leave a Reply
Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter . If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.