PDA

View Full Version : Facebook Virus!


bagellad
12-13-2008, 05:48 PM
Anyone been getting calls about the Facebook virus yet? I had a customer say they had 100s of infections from it. But it was a fake anti virus which got on when they "updated their adobe flash". I think it says dormant while it messages all their friends on facebook. Anyway Combo fix and Mal-ware bytes seemed to remove it. Anyone got any other tips?

seedubya
12-13-2008, 05:58 PM
Isn't that Koobface? http://blog.threatfire.com/2008/12/koobface-notes-flashupdateexe.html I've had quite a few of these over the last couple of weeks. It was already active on Bebo before the Facebook variant arrived.

bagellad
12-13-2008, 06:01 PM
the customer I had seemed to have Virus Response 2009 or something. A very ironic name.

TF_kj
12-14-2008, 09:41 PM
Hey guys, keep in mind that the final goal of the distributors of the Koobface worm is to install a couple of adware components (tinyproxy.exe and the bho), as described on the ThreatFire blog post. So yes, the client could have been hit with the worm and now seeing those adware components popping the phony rogueware Virus Response shock messages.

Btw, nice site,
Kurt

solas
12-15-2008, 12:43 AM
Isn't that Koobface? http://blog.threatfire.com/2008/12/koobface-notes-flashupdateexe.html I've had quite a few of these over the last couple of weeks. It was already active on Bebo before the Facebook variant arrived.

Im actually in the process of removing koobface from a pc, along with dozen or so others.