Facebook Virus problem

mary2012

Hi

I clicked on a link in a political group I am in on Facebook on Friday. It was a virus (and no, I have no interest in p0rn!)

It was a link to a "14 year old saying this in public".

Anyway, it sent the link to everyone I know, and is also sending people links in their emails, and has even gone over to my 2nd facebook account.

I changed the passwords, removed links from all pages and did full system scan using Avast that I have. Last night the virus still has not gone, and began posting the links on pages/groups I am in.

It has joined me into a lot of foreign groups, most are saying I love Allah/Mohammed... all very odd.

I have tried to contact Facebook support, but not got anywhere. Any suggestions?

sithmaster

mary2012 wrote: »

Hi

I clicked on a link in a political group I am in on Facebook on Friday. It was a virus (and no, I have no interest in p0rn!)

It was a link to a "14 year old saying this in public".

Anyway, it sent the link to everyone I know, and is also sending people links in their emails, and has even gone over to my 2nd facebook account.

I changed the passwords, removed links from all pages and did full system scan using Avast that I have. Last night the virus still has not gone, and began posting the links on pages/groups I am in.

It has joined me into a lot of foreign groups, most are saying I love Allah/Mohammed... all very odd.

I have tried to contact Facebook support, but not got anywhere. Any suggestions?

how do you know you have a virus on your system?
is it still putting posts on your contacts?
if you did a full system scan with up to date definitions and it found nothing I would say you don't have one
Avast is one of the few anti-virus programs I trust and use it myself
Just note you should never click links on facebook even if its from some you know as there is a lot of scams, fake links.

mary2012

Hi, thanks for your reply.

I just presumed it was a virus. What could it be then?

Yes it is still putting the links, mainly in groups I am in. It has also emailed people.

I am confused as to why it has migrated to my other Facebook account? Different usernames/passwords.....

I dont usually click on anything, but didnt even read the description properly

shakeitright

Follow the steps in this sticky https://forums.moneysavingexpert.com/discussion/133269 may find something your av didnt.

waddler_8

Look through your apps and remove any you don't use or recognise.

jhe

was it this http://facecrooks.com/Scam-Watch/Just-14-years-Old-drunk-girl-did-this-infront-of-all-Public-Facebook-Scam.html think it gives advice if you have clicked on the link

mary2012

Yes thats the one jhe.

I only have Candy Crush on now Waddler... sad I know lol.

Thanks Skaeitright, I will look at that

Thanks all

waddler_8

Post me a DDS log - should take 2-3 minutes.

Download DDS from the link below and save it to your desktop:

Link

After you've downloaded it and saved it to your desktop:

• Double click DDS to run it.
• Click Start
• When it's finished, DDS will open two logs:

1. DDS.txt
   
2. Attach.txt

Save both reports to your desktop.

Copy & paste the contents of just DDS.txt for now and post it here (you may need to split the log over separate posts)

sithmaster

do you use free avast or paid?
if free download spybot
http://download.cnet.com/Spybot-Search-Destroy/3000-8022_4-10122137.html?!!!!!mncol;1
run that may take about 20 mins but will root out any spyware
if you already have it make sure you update it every time you use it

mary2012

I did Malware scan a few mins ago, and 4 rogues were found. Deleted those and rebooted.

Yes its free avast version

waddler_8

This firefox extension looks a likely culprit.

FF - ExtSQL: 2013-07-26 22:56; {B40794A0-7477-4335-95C5-8CB9BBC5C4A5}; C:\Users\Teresa\AppData\Roaming\Mozilla\Firefox\Pr ofiles\k6wbaggx.default-1350156563940\extensions\{B40794A0-7477-4335-95C5-8CB9BBC5C4A5}.xpi

Show your hidden files and follow the filepath and delete that file.

http://windows.microsoft.com/en-gb/windows7/change-folder-options