How to Fix the Koobface Virus

Koobface can modify your Facebook profile.

Koobface, also known as Koobface.B, is a virus that most likely infected your computer by way of a malicious video codec. Koobface breaks into your Facebook and MySpace pages and modifies your profile. In addition, Koobface may add links to your profile page that take users to malicious websites. Fortunately, Koobface can be manually removed. Note that these instructions apply to Windows Vista and Windows 7.

Instructions

End Processes

1. Press "Ctrl," "Shift" and "Escape" at the same time to open the Task Manager.

2. Click on the "Processes" tab of the Task Manager.

3. Click on "Show Processes From All Users."

4. Right-click on "fbtre6.exe" and select "End Process."

5. Close the Task Manager.

Delete Registry Keys

1. Click "Start" and then type "regedit" into the Search Programs and Files box and press "Enter." The Registry Editor opens.

2. Delete the following registry keys from the left pane of the Registry Editor. To delete a registry key, right-click on it and select "Delete."

   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run\systray = C:\Windows\fbtre6.exe
   HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\Navigating

3. Close the Registry Editor.

Delete Files

1. Click on "Start" and then type "fmark2.dat" into the Search Programs and Files box.

2. Right-click on the "fmark2.dat" file that appears in the Results List and select "Delete."

3. Restart your computer.

References

• FasterPCCleanClean.com: How to Remove Koobface.B Worm