Koobface worm?????

Question

Level 1

1 points

Koobface worm?????

I received a pop-up security message that my browser had been frozen and was given a number to call. I was told my network had become infected with Koobface,

after a diagnosis, and 3 or four options to remove it were given. One cost around $500. Other weren't cheap, but much less. I mentioned I had Applecare and she said I could get a one time fix free from the Apple store. I told her I needed time to decide what to do (scam was coming into mind) and she gave me a number to call back later and her name. I think this must be a scam, but is it possible that a Koobface infection has occurred.? How can I find out if an infection has occurred and if so, how to remove it.

Posted on Dec 11, 2014 6:46 PM

Reply

Answer 1

Dec 11, 2014 6:49 PM in response to Panthetic

You are absolutely right, it's a scam, and you should ignore anything they said.

Reply

Answer 2

Imp68

Level 4

2,672 points

Dec 11, 2014 6:56 PM in response to Panthetic

If safari is frozen on a pop up like that, click the apple > force quit and force quit safari. Then hold shift, click the safari icon on your dock, let go of shift when the window appears. Done.

If you are still getting random advertisements, review Remove unwanted adware that displays pop-up ads and graphics on your Mac - Apple Support .

Reply

Answer 3

Panthetic Author

Level 1

1 points

Dec 12, 2014 7:27 AM in response to Imp68

The phone number I was given is for a company named Zavions LLC and describes itself as an independent provider of remote tech support. Know anything about it?

Reply

Answer 4

Kurt Lang

Level 9

57,864 points

Dec 12, 2014 8:01 AM in response to Panthetic

Absolutely, 100%, guaranteed scam. Your Mac has no issue. There are many such scam sites which attempt to lock your browser to a particular web page. They claim to be the FBI, CIA, IRS, or any number of made up computer security firms (like this one). The goal of every one of these is to scare you into paying them lots of money to do nothing.

Even better (for them), they will convince you to install software to give them remote access. They will then show you all kinds of normal files on your computer and tell you they are dangerous and need to be deleted. They will do their best to make your Mac non functional and charge you more money to fix the problems they created, claiming malware they deleted was the cause. And even better! (again, for them), they now have your credit card number. And even better!, they may get try to get you to install a key logger so they can steal other credit card info, bank account numbers and PINs, and who knows what else.

Main thing here is that there is NO software of any kind that can remotely detect anything on any computer through a web browser. Any web page that pops and says your computer has some sort of issue is a lie. Plain and simple.

Expect them to now call you incessantly, trying to fleece you out of hundreds of dollars. Ignore them and hang up immediately, no matter how many times they call.

Reply

Answer 5

213JB

Level 2

385 points

Dec 12, 2014 8:01 AM in response to Panthetic

Yeah, its a scam.

Follow the link above from imp to remove any ad injection software you may have incurred.

If Safari still does not allow you to use it as normal.

Try:

Force quiting Safari.

Move ~/Library/Safari to the desktop.

Launch Safari.

Reply