WiredWX Hobby Weather ToolsLog in

 


descriptionFacebook Worm Starts Infecting Users EmptyFacebook Worm Starts Infecting Users

more_horiz
Hey, I have this hilarious video of you dancing. Your face is so red. You should check it out.

If you've received a message like that through Facebook or MySpace, you may have been exposed to the "Koobface" virus. "Koobface" comes through an e-mail sent by one of your social networking site friends inviting you to scope out a video.

Once the URL is clicked, "Koobface" prompts you to update your Flash player before the video can be displayed. Therein lies the virus, cloaked in a "flash_player.exe" file. According to the Kaspersky Lab, an antivirus organization working closely with Facebook, "the worms transform victim machines into zombie computers to form botnets."

The McAfee Security Blog explains that when "Koobface" infects your computer, it prompts a downloaded service named Security Accounts Manager (SamSs) to load on start-up. SamSs then proxies all HTTP traffic, stealing results from popular search engines and hijacking them to lesser-known search sites.
More Information

descriptionFacebook Worm Starts Infecting Users EmptyRe: Facebook Worm Starts Infecting Users

more_horiz
Looking at the Symantec write up, is this the crap that drops tinyproxy?

descriptionFacebook Worm Starts Infecting Users EmptyRe: Facebook Worm Starts Infecting Users

more_horiz
Yes, as far as we know anyway.

descriptionFacebook Worm Starts Infecting Users EmptyRe: Facebook Worm Starts Infecting Users

more_horiz
I'm not into social networking so I don't have to worry.

descriptionFacebook Worm Starts Infecting Users EmptyRe: Facebook Worm Starts Infecting Users

more_horiz
Haha. Same here.

descriptionFacebook Worm Starts Infecting Users EmptyRe: Facebook Worm Starts Infecting Users

more_horiz
privacy_tip Permissions in this forum:
You cannot reply to topics in this forum