What is freddy46.exe?

freddy46.exe is one of the filenames used by the Koobface worm. It has also been using the following filenames: freddy35.exe, freddy36.exe, freddy37.exe, freddy38.exe, freddy39.exe, freddy40.exe, freddy41.exe, freddy42.exe, freddy43.exe, freddy44.exe and freddy45.exe.

I suppose we soon will see names like freddy47.exe, freddy48.exe, freddy49.exe, freddy50.exe, freddy51.exe, freddy52.exe,
freddy53.exe, freddy54.exe, freddy55.exe, freddy56.exe, freddy57.exe, freddy58.exe, freddy59.exe, freddy60.exe, freddy61.exe, freddy62.exe, freddy63.exe, freddy64.exe, freddy65.exe, freddy66.exe, freddy67.exe, freddy68.exe, freddy69.exe, etc popping up.

The following information is quoted from Wikipedia. http://en.wikipedia.org/wiki/Koobface

"Koobface is a computer worm that targets the users of the social networking websites Facebook and MySpace. Koobface ultimately attempts, upon successful infection, to gather sensitive information from the victims such as credit card numbers.

Koobface spreads by delivering Facebook messages to people that are 'friends' of someone on Facebook whose computer has already been infected. The messages contain innocuous subject headers such as "Paris Hilton Tosses Dwarf On The Street", "LOL", and "My friend catched [sic] you on hidden cam". Upon receipt, the message directs the recipients to a third-party website unaffiliated with Facebook where they are prompted to download what is purported to be an update of the Adobe Flash player. If they download and execute the file, they will infect their computer with Koobface. Koobface then commandeers their surfing activities and directs users to contaminated websites when they attempt to access search engines from Google, Yahoo, MSN and Live.com.

It should be noted that Koobface is an anagram of Facebook; "face" and "book" change order and "koob" is "book" in reverse."

# 16 Jun 2009, 23:59