How to remove WORM_KOOBFACE.IT worm

[Daniel23]

Hi buddies, my system throwing an error message that your computer are infect by WORM_KOOBFACE.IT virus. This virus are arrives in to my system when I was browing an Internet from Internet Explorer 8. This virus are creating a autorun file in the each partion of the hard drive. I want to remove this virus form my machine as soon as possible. Can any one tell me how to remove this virus from my computer, please?

[Spyrus]

WORM_KOOBFACE.IT worm makes a copy of its own. Then this virus the connects to specific URLs to send system data and information and receive commands. Once you have connected to the given servers, then the remote malicious user can able perform commands on the infected computer. The received commands may include downloading of other files from a remote server

[Zachary]

Remove the given registry value:

• In HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\

Internet Explorer\Main
tp = "1000"

• In HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\

Windows\CURRENTVERSION\Run
sysfbtray = "%Windows%\bill102.exe"

[Big Fish]

WORM_KOOBFACE.IT worm makes the given below non-malicious file:

%Windows%\bk23567.dat

WORM_KOOBFACE.IT worm generates the given below registry entry to automatic run at all time when system startup:

• HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\

Windows\CURRENTVERSION\Run
sysfbtray = "%Windows%\bill102.exe"

[Shen]

Once you have joined to the given servers, then the remote user shall do any of the given commands on the infected system:
SIMPLEMODE
RCAPTCHA

• APPLE
• RAZLOG
• TITLE_B
• DOMAIN_B
• LINK_B
• LINK_S
• LINK_C
• TEXT_W
• LINK_W
• TEXT_M
• TEXT_CH
• LINK_MH
• START