I wrote this article to help you remove Windows Detected Koobface. This Windows Detected Koobface removal guide works for Chrome, Firefox and Internet Explorer.

The Windows Detected Koobface pop-ups are bogus security alerts. They originate from a computer worm. The rogue program tries to make users follow its misleading instructions. Doing so would only make the situation worse. If the Windows Detected Koobface pop-ups have started appearing on your screen, there is a malicious program in your machine. However, the messages are not a warning about this threat. They are generated by the program you need to remove from your computer. The behavior of the worm is a sound strategy, as the messages direct the attention away from the actual culprit. The ultimate goal of the cyber criminals is to raise proceeds at the expense of PC users.

How does the worm behind the Windows Detected Koobface pop-ups jeopardize my security?

The clandestine program coveys an alarming message. It claims there is an infection in the computer. According to the Windows Detected Koobface pop-ups, your machine has been penetrated by a virus which needs to be removed as soon as possible. They list a hot line which you need to contact to get instructions on solving the problem. The bogus security number is the following: 800-754-3403. This line is operated by affiliates of the cyber criminals. Calling the fake help center will get you in contact with an agent who is involved in the scam. He will present himself as a certified technician and try to convince you that he is aware of your problem. You will be offered to purchase an anti-virus program to have the supposed infection removed.

You should not dial the bogus help center number. Doing so could cost you a lot of money. The price for calling the hot line may be very high. Deciding to purchase the security software they are offering you is even worse. The program in question is a product of the same developers who have created the worm behind the Windows Detected Koobface pop-ups. It is unreliable. The software will not be able to detect and remove actual threats. Furthermore, the fake AV tool can turn out to be malware itself. It could cause more damage to your system, rather than be of help.

Ignoring the Windows Detected Koobface pop-ups is the wisest course of action which we advise all users to take. However, it is insufficient to solve the existing problem. The worm has to be uninstalled from your system. The insidious program has another capability which poses a threat to your privacy and your financials. The worm is set to keep track of your browsing sessions and collect the input you enter into your browser. It can record your history, cookies, keystrokes, IP address, email, geographic location, zip code, demographic details, physical address, phone number, user names, passwords and PIN codes. The gathered data can be used to break into your personal and financial accounts and steal from them. This would be a grave danger, if you use banking and other financial services online.

How can the worm behind the Windows Detected Koobface pop-ups enter my machine?

The worm behind the Windows Detected Koobface pop-ups has adopted two dark patterns. The more common method is fake update notifications. The requested update can be for a custom program or a default system component. To check if a given application has an upgrade available, open it. If it does, the same message should appear again. It is even easier to find out whether a system element needs to be updated. Consult the Windows Update Center. All notifications regarding the system software and hardware are listed there.

The other propagation vector the worm behind the Windows Detected Koobface pop-ups uses is spam email campaigns. The furtive program hides behind attachments to misleading letters. The sender will tell you that the attachment is an important document. The file can be listed as a receipt for a delivery package, a legal notice, a utility bill, a fine for a minor violation or a subpoena. You need to check the contacts to make sure the message is genuine. Proof the email account the sender has used to contact you. It should belong to the entity he claims to be representing.

Windows Detected Koobface Uninstall

Before starting the real removal process, you must reboot in Safe Mode. If you know how to do this, skip the instructions below and proceed to Step 2. If you do not know how to do it, here is how to reboot in Safe mode:

For Windows 98, XP, Millenium and 7:
Reboot your computer. When the first screen of information appears, start repeatedly pressing F8 key. Then choose Safe Mode With Networking from the options.

For Windows 8/8.1
Click the Start button, next click Control Panel —> System and Security —> Administrative Tools —> System Configuration.‌

Check the Safe Boot option and click OK. Click Restart when asked.
For Windows 10
Open the Start menu and click or tap on the Power button.

While keeping the Shift key pressed, click or tap on Restart.

Please, follow the steps precisely to remove Windows Detected Koobface from the browser:

Remove From Mozilla Firefox:

Open Firefox, click on top-right corner , click Add-ons, hit Extensions next.

Look for suspicious or unknown extensions, remove them all.

Remove From Chrome:

Open Chrome, click chrome menu icon at the top-right corner —>More Tools —> Extensions. There, identify the malware and select chrome-trash-icon(Remove).

Remove From Internet Explorer:
Open IE, then click IE gear icon on the top-right corner —> Manage Add-ons.

Find the malicious add-on. Remove it by pressing Disable.

Right click on the browser’s shortcut, then click Properties. Remove everything after the .exe” in the Target box.

Open Control Panel by holding the Win Key and R together. Write appwiz.cpl in the field, then click OK.

Here, find any program you had no intention to install and uninstall it.

Run the Task Manager by right clicking on the Taskbar and choosing Start Task Manager.

Look carefully at the file names and descriptions of the running processes. If you find any suspicious one, search on Google for its name, or contact me directly to identify it. If you find a malware process, right-click on it and choose End task.

Open MS Config by holding the Win Key and R together. Type msconfig and hit Enter.

Go in the Startup tab and Uncheck entries that have “Unknown” as Manufacturer.

Still can not remove Windows Detected Koobface from your browser? Please, leave a comment below, describing what steps you performed. I will answer promptly.