Home Current or Ongoing Computer Security Threats Downloader Trojan - Facebook Password Reset Confirmation
Downloader Trojan - Facebook Password Reset Confirmation
Wednesday, 28 October 2009 22:04

If you're a Facebook user, you need to be aware of the latest email virus/trojan.

 

It comes as an attachment to an email with the subject:

 

Facebook Password Reset Confirmation

 

The body of the email contains the following text:

 

Hey <username> ,

Because of the measures taken to provide safety to our clients, your password has
been changed.
You can find your new password in attached document.

Thanks,
The Facebook Team

The attachment is a 21 kiloByte zip file, containing a single file.

 

virustotal.com scan results

This file isn't recognized by most bigger antivirus programs such as Symantec/Norton, McAfee, and Trend Micro.

 

 

Once your computer is infected, this trojan then downloads other files from the Internet and executes them.  At least one of these files installs a fake antivirus program on the infected computer, encouraging the user to buy the rogue software.

 

Last Updated on Wednesday, 04 November 2009 23:48
 
Copyright © 2010 CB Services. All Rights Reserved.
Joomla! is Free Software released under the GNU/GPL License.