Share via

Remove koobface

Anonymous
2016-04-13T16:50:02+00:00

When I signed in to YH today, received a captcha of " validation code" needed. Never saw it before. Asked question on YH community, was advised to call CS. The tech remotely scanned and said computer had the Koobface network worm. He advised me to take computer to Microsoft store (we don't have one near) . Have Toshiba laptop, Win 8.1, and Kaspersky Total Security. Ran both their scan and the Malwarebytes. Both say no threats. Tried to turn on Defender but cannot find out how to do so. My  Action Center page states that the Network Access protection is OFF. I don't recall turning this off. How to turn it on or should I ? I'm not exactly computer savvy-I know just enough to get myself in trouble. Anyone help? Thanks in advance.

Windows for home | Previous Windows versions | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments
Answer accepted by question author
  1. Anonymous
    2016-04-13T17:10:59+00:00

    What is "CS"?

      Koobface is a tech support scam similar to this.  
    
      Tech Support Scams Pop-Ups on the Rise  
    

    https://blog.malwarebytes.org/fraud-scam/2014/11/psa-tech-support-scams-pop-ups-on-the-rise/

      Or a phone call claiming to be from Microsoft.  
    
      As long as you didn't call them and let them take control of your
      computer you're OK. You can usually get out of that "window" using
      the Task Manager.  
    
      FYI: Defender will not run when another security program is
      present.
    
    0 comments No comments

10 additional answers

Sort by: Most helpful
  1. Anonymous
    2016-04-13T21:12:03+00:00

    Do you know for sure you actually talked to Yahoo Support? What issues are you experiencing right now?

    Have no problems at the moment-that I know of. However, I received another message from the YH support. Said they do not offer phone support so the number  listed on their YH Help page was a scam number.Not certain if I DO have the Koobface. Changed my password twice. Still waiting on tech support from Kaspersky.Thank you for the replies-I'm stuck twixt a rock and a hard place..

    0 comments No comments
  2. Anonymous
    2016-04-13T21:03:37+00:00

    I was having problems with downloading transactions from my credit union.  I called them and the checked some things and said they had to refer me to their Quicken specialist.  They transferred my call, but gave me the number in case I needed it in the future.  The foreign speaking person immediately took over the PC, so that he could "fix it right away".  Told me I had koobface.  I tried to duplicate the whole process by doing a dos command cmd.exe tree\ and nothing.  Checked everything.  He said it was very very serious and wanted $169.99 to fix it.  Grrrrrrrr  Malware bytes and security essentials finds nothing.

    0 comments No comments
  3. Anonymous
    2016-04-13T19:09:13+00:00

    Do you know for sure you actually talked to Yahoo Support? What issues are you experiencing right now?

    0 comments No comments
  4. Anonymous
    2016-04-13T18:45:33+00:00

    Hi Mr. Hagan,

    Thanks so much. CS is customer service. When I posted the question to  the Yahoo Answers community immediately after seeing the "verification" pop up, I received more than 10 answers-all said to call Yahoo customer service. I did and was then connected to a tech. (I hope!) He did remotely scan my computer-and that's when he asked if I received much spam-I get 5-10/day in my spam folder. I delete all without opening. that's when he said I had the koobface network worm. I'm not computer- literate enough to tell how or IF I have this worm. I ran both the Malwarebytes scan and the Kaspersky scan-neither showed anything. Any recommendations are welcome.

     I did read on these MS forums of a free tool called EMSISOFT, but have not downloaded it. States it will "find and clean malware infections". I don't know if this is legitimate or not.

    0 comments No comments