View Full Version : **Trojan virus warning**

12-04-2008, 01:01 PM
people are getting a video sent to them from a friend on facebook, it is a trojan, do not open the link unless they meant to send it to you

12-04-2008, 02:07 PM
That one SUCKS - DQ I got it a few weeks back!!

12-04-2008, 02:43 PM
Just remember don't open anything anywhere if you don't know who sent it.

12-04-2008, 02:45 PM
The one my son opened was from a friend.

12-04-2008, 02:46 PM
* Home
* About Schipul
* Subscribe via RSS

Facebook Users Attacked by Trojan Virus

November 7th, 2008 | Published in Facebook, Internet Viruses, Using Social Media | 14 Comments

Facebook and its users are having a rough day. A serious Facebook virus is attacking the network’s users.

For the laymen:

If you receive a Facebook message (or a Facebook message alert in your email) with a questionable subject line, DO NOT CLICK THE LINK IN THE BODY!

All of the information in this post was garnered from an awesome article from news.com.au by Narelle Towie.

Questionable subject titles vary from “Maan,yyou’re great!” to “your ass looks not bad in this video”, “Some0ne thinks your special and has a *Hot_Crush* on you. Find out who it could be*” or a youtube link that says ‘”i can see yooooooooo”. These links disguise a trojan worm and should not be clicked.

This trojan comes just months after Facebook said it was working to protect its user from phishing scams.

For the tech geeks, here is a more detailed explanation of the virus from Towie’s article:

FACEBOOK users are under attack from a virus sweeping through the online social network.

The virus is technically a trojan worm that disguises itself as an email from facebookmail.com.

People are enticed to click on a misspelled video or picture link that directs to a malicious web site.

The worm spreads its tentacles by emailing everyone on the victim’s friend list.

According to anti-virus software company Symantec, the trojan works by executing a worm called W32.Koobface.A that searches for cookies on the user’s machine.

If the worm finds the appropriate Facebook cookie, it modifies the users account settings and profile - adding links to malicious sites to trick others into installing the invader.

Facebook discussion boards talk about the trojan directing users to a page which looks like YouTube.

The phony page asks the user to install a video player upgrade.

Installing the fake upgrade allows the worm to work its magic and access files on the victim’s machine while destroying their Facebook account.

Facebook has begun combating the virus by deactivating link when it can.

Facebook has not released an official comment regarding the attack.

**Thank you Flickr user pshab for the awesome Facebook photo.

Jackie B
12-04-2008, 02:46 PM
Yeah, I got one a month or two back from a friend, but it had a bunch of spelling mistakes in the heading, so I knew it was bogus.

\m/ Rich \m/
12-04-2008, 07:07 PM
saw a new one today with WOWWWW as the sudject line.

12-05-2008, 12:05 PM
Attention new viewers: those 5000 “friends” you have on Facebook? They might not actually be your friends. In fact, some of them might be scammers trying to infect your computer with a new virus dubbed “Koobface”. Koobface, which already made the rounds on MySpace, is now worming its way through Facebook. The Koobface virus uses Facebook’s private messaging system to infect computers via a shared video. Unsuspecting users will see a video link (shared by an infected friend) with the message, “You look just awesome in this new movie.” Click the link will lead you to an outside site where you’re told that you need to download a Flash update, which is actually a virus file. Once the virus is installed, it will try to grab sensitive data off your PC, like credit card numbers.

In a way this a very old virus; it operates much like mass-mailing worms that used to infest Usenet and e-mail lists. But it’s proving an effective tactic on social networks where private messages from friends seem more trustworthy than traditional e-mail, which even the most neophyte web users have come to distrust. With its some 120 million users, Facebook is not only a potentially lucrative target, but it’s well into the mainstream, which means more gullible, less internet-savvy users for virus creators to prey on. The virus watchdog blog for McAfee labs reports that Facebook is aware of the Koobface attack and is already working to remove the spammed links from its system. But with dozens of Koobface variants known to exist, McAfee warns that “the situation is likely to get worse before it gets better.” Should your PC be infected the Koobface worm, the Facebook security blog suggests resetting your password and running updated anti-virus software to purge the worm from your system.

12-05-2008, 10:26 PM
i just received a thing on facebook that says in the notifications....You Have a Private Message and then it says the image has been deleted or moved from photobucket...but i had no link to click on....and it was from the application You Are Beautiful...

12-11-2008, 10:25 AM
I knew there was a reason I don't bother with those social networking sites.....