Facebook Hit With Virus

[Ross]

Maybe this is a good reason to stay away from social sites?

Facebook gets hit with a virus

I've been cleaning this sucker for the last 3-5days in heavy amounts...one kid got it at work and spread it to the rest of them.

The only good thing is I think business will pick up at home with people calling to have it removed...

Now let me explain whats going on besides this quote..its going to load "TinyProxy" this along with several other malware/spyware additions which will change your proxy settings in both Firefox and IE..so they have to be changed manually even after scans using the latest tools.


Quote:
Facebook has been hit with a virus that could spread to its 120 million users. The virus has been dubbed "knobface", which tries to gather personal information from users computers such as credit card numbers.

The virus dubbed "knobface" sends a message to all the friends of the infected titled "You look just awesome in this new movie". Users who opened the messaged where asked to download a fake update for Adobe flash player, which was actually the virus itself being downloaded and installed onto victims computers. If users attempted to use any of the major three search engines such as Yahoo, Google, or Live search, users would be taken to contaminated sites.

All users are being asked to run their updated anti-virus scanners to check for potential contamination. Facebook has also posted a response to help users clean infected machines on their security web site.

Here is a list of tools and steps to follow to ensure a clean machine


Quote:
First is to run through your add/remove programs list and trash anything that looks like junk (just helps to clean the comp up) I remove all toolbars I find as I've seen some of the vundo variants attach to them for some reason. You can always install them again later so don't worry about it.

2nd thing is to TURN OFF System Restore!!!

3rd go to Start,Run, and type in msconfig and uncheck anything that looks funny from the Startup Tab including IM's for the time being as you will want to restart the computer fast and keep the variants from starting as well.

Load CCleaner (no need to install this, its portable!) and select everything to clean! - http://www.majorgeeks.com/CCleaner_Portable_d5735.html
Load/update Avast Home - http://www.avast.com
Load/update superantispyware - http://www.superantispyware.com
Load/update Malwarebytes - MalwareBytes
Load/update spybot Search & Destroy 1.6 - spybot
Download - msautoruns ms Autoruns

Boot into safemode and set Avast for a bootscan upon restart- preselect it to delete anything it finds etc but don't reboot the computer.

Run ccleaner to remove all junk and crap from your temp files etc.. you will still need to set hidden files/folders to show up in the folder options and browse to your Local folder within your user account and select all files in Temp and temp internet files folder and delete EVERYTHING!

Next run superantispyware full scan..if it finds major things mostly whats found in memory it will require reboot..thats fine reboot and then let avast run its scan and boot into windows normally.

Run MalwareBytes and remove whatever it finds.

Next run msautoruns and again check for anything odd usually not showing a publisher or a looks like this "jaleiwa.exe" etc you get the idea. Just right click on them and delete thats it. Close auto runs and then run spybot to finish up that last ditch scan clean up using it.

Run ccleaner once more then reboot and see where you stand after this point. Keep in mind this may take at least 4hours to complete but it should remove everything if you've done it right!

Good Luck!

__________________

 

[Dina]

One thing about NOT being a social butterfly...is steering clear of
all the social diseases

Thanks for the info Ross.
Dina

 

[Bina]

Yup, Facebook is all fun until someone gets diagnosed with something nasty!

 

[Eva]

Thanks, Ross,

I love facebook as I catch up with all friends and family members all over the world, yet everytime I open it my computer freezes for a short while and starts acting funny afterwards.

 

[woodworker5280]

i wanna know who the fools are that are opening random messages like this, and then DOWNLOADING something before they know what it is. i've had a PC for 13 years now and not once have i gotten a computer virus.

oh well, good luck to those who get it!

 

[Ross]

That's just it woodworker5289, people do not listen and open everything without checking them with antivirus first.

First law in computer world...Do not open anything from someone you do not know.

Second law, even if you do know, don't open an .exe, .zip or any file until you've scanned it with your antivirus program.

Third Law....If you don't have an antivirus program and your wondering why your computer is slow, randomly displaying advertisements or just plain blue screens on you, you asked for it! There is no reason why anyone should not have an antivirus program, keep it updated and use it. There are good free ones available, so not affording it is not an excuse.

I've gotten quite a few viruses. I've even saved some to play with. Kind of cool watching how they take over your machine. Don't do this unless you don't mind formatting your hard drive and losing all your files! I've been doing it for a while now. There isn't too much on the internet that I can't detect on sight anymore.

 

[Dina]

First law in computer world...Do not open anything from someone you do not know.

Second law, even if you do know, don't open an .exe, .zip or any file until you've scanned it with your antivirus program.

Third Law....

Ross, for those of us who need instruction....can you list the 97 other
laws not listed here...?

Thanks--Dina

 

[Ross]

Law 4, see laws 1 through 3. If you can't follow those directions, unplug your machine, put it back in the box and sell it, store it or give it away.

 

[Dina]

Law 4, see laws 1 through 3. If you can't follow those directions, unplug your machine, put it back in the box and sell it, store it or give it away.

Should I turn the machine off before I unplug it?
And I'm gonna need your shipping address