Sonicwall Signatures


Go to All Categories list.

Koobface.NBQ is a Worm. Worms spread from computer to computer, making copies of themselves over the network. They could spread over email, IM, peer-to-peer networks, or directly over the wire by leveraging vulnerabilities. Koobface.NBQ is compressed using the UPX executable packer and its file size is 14,848 bytes. Koobface.NBQ drops the following files on the hard drive:
  • C:\WINDOWS\TEMP\x2.dat (2 bytes)
  • "C:\sample.exe" (14848 bytes)
  • C:\windows\ld09.exe (14848 bytes)
  • C:\nm8912.bat (126 bytes)

Relevant Information