Another Facebook Virus...

[SpeedRacerSlots]

Well, for those of you that are FB users, beware.
There is another FB Virus masquerading out there as a Christmas Card and another as a New Years Card and New Years Party Invitation.
Its a tough booger and much more advanced than the last one that I had to deal with.

My Brother In Law unfortunately clicked on the link on his NetBook...(no CD drive...) and got the mess. It installs everywhere under the sun and modifies some protected system files that you cant fix without doing a System Restore (which most NetBooks dont have, due to the small drive footprint of the machines).

Anywhoo, it installs the appearance of an AV Alert and tells you that a virus is detected do you want to enable the cleaning.... next thing you know, you are greated with the screen below (which itself is Malware and a web proxy):



Anyway it uses the web proxy over an open port and uses the Windows Media Player installer to allow the stuff coming in to install itself.

There are several sites out there with instructions to stop it (none of which work in their entirety).

Just a word to update your AV and Malware tools on your machines and make sure you have a current backup and a current, clean restore point if it comes to that.

Now on to the problem with this booger being on a NetBook... there is No CD, he doesnt have the restore discs and there isnt an AV package yet that can make a ReadOnly Bootable USB Jump drive to scan your machine from...

I just downloaded NAV 2010 NetBook edition for him, but its not going to solve the problem that he already has, because YEP... you guessed it, this booger is smart enough to disable installs of all antivirus packages, so you cant even do that...

So just a heads up and a good luck if you should run into them.

[Flea77]

There is a command line scanner for Norton which I have used on occasion from a bootable CD, which of course could easily be done from USB. Of course the #1 method we use to scan drives like this is to remove the drive from the machine and scan it on a bench machine.

Hope this helps.

Allan

[Cajungaltx]

Because those net books don't come with a CD drive - usually there is a section of the harddrive that holds the restore data on it. I take it this one didn't have that?

There's a program that you can get - it's USBA something - I'll have to check with Brad - but it's a USB bootable program -I'll try to ask him what it is tomorrow am and get back to you on it! ;-)

[SpeedRacerSlots]

Thanks Donna. Be curious to see what you come up with.

[Cajungaltx]

Greg - I haven't had a chance to talk to Brad - but I did some searching after I put Sarah down for bed, and I was right - you want a portable version.

avast! U3 Edition - mobile antivirus software for flash drive

He'll need a U3 usb drive - Brad picked his up at Walmart - I don't know if you can do something to a regular usb thumbdrive to make it work - but you need a portable program.

Kaspersky's AVP tool is another one.

Hope it helps. ;-)