Hijackthis found W32.Koobface.B in my computer

[Lishi]

Hi,
I found a worm in my computer. The name of the worm is W32.Koobface.B. I need some technical information of the same. How does it spread. Means what are the sources by which it enters a system. And what are the possibilities of manually removing the virus from the system. Which is the recommended antivirus for such worms. Thanks.

[Shen]

The worm is a dangerous for a system. It enters in a computer through social networking sites. Like Orkut or Facebook. The worm target a user by generating spam messages. The messages enters a user profiles on the site. The phrases is messages are unique like LOL, My friend catched you on hidden cam, etc. The message then contains a link to Youtube. When you click on the link it directs you to the Youtube site. This contains a video clip. When you try to play the video a message appear which will prompt your for latest flash player update. If you accept it then it download a file called codecsetup.exe in your machine. This file is also a type of network worm. And here when you run it your system is infected. Download the below tool to clean the same.
Spyware Hunter Download

[Steve123]

The files created by the worm is fbtre6.exe in the Windows directory. You can search it and delete the same. Then click on Start > Run > type regedit. In the registry editor delete the following value - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run\systray = C:\Windows\fbtre6.exe. Also delete fmark2.dat and fbtre6.exe from C:\Windows. Restart your system and run a scan.

[Snake08]

The virus enters your system via social networking sites. So it better if you have a internet security antivirus in your computer. The virus creates the following list of files in your computer. You can delete them manually. The files are kbdsapi.dll, lmfunit32.dll, mcaserv32.dll, ncsjapi32.exe, ecls.exe, ekrn.exe, ekrnAmon.dll, ekrnEmon.dll, ekrnEpfw.dll, ekrnScan.dll and em000_32.dat. Delete all this files and file relevant to this names. After that run a registry repair tool also.