Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Nova atualizacao disponivel - major nuisance trojan payload

Hi,

First of all I run and have been running the free Sophos Anti-virus for Mac for the past year or more. Am running version 7.3.10C on Snow Leopard 10.6.8. I am based in Lima Peru...

Since yesterday afternoon I have been plagued with the message Nova atualizacao disponivel (in portugese no less) on Facebook regardless of what browser I try to use,,, Safari, Chrome or Firefox... See the screenshot for more...

Clicking the link tries to install an trojan masquerading as chrome.exe I simply force quit the browser here 

Steps I have taken to try eliminate this persistent popup are..

cleaning cookies, caches and history on all 3 browsers....

running a full sweep of the hard drive with the Virus Scanner (100% clean)

running a complete maintenance clean with OnyX and rebooting...

Let me stress here that my web browsing is not affected anywhere else but on facebook... after the reboot all seemed okay for a few hours and then suddenly the menace is back again!

Once this message appears I am effectively 'frozen out',,, and have to force quit... I am getting all sorts of issues from not being able to post to 404's and plain non-responsiveness when clicking on facebook links! Bottom line... Facebook has now become unusable on my mac...

I have done a terminal search for Flashback... all clear there too,,, 

Need your help

Thanks

Alex

Safari Example

firefox example

:1006841


This thread was automatically locked due to age.
Parents
  • Hi Alex,

    Your computer is fine -- at some point, you've fallen for a Facebook scam and because of this, your Facebook account has become compromised and is now redirecting you to a malware landing page when you log on.  I would recommend contacting Facebook for help fixing your account.

    :1006859
Reply
  • Hi Alex,

    Your computer is fine -- at some point, you've fallen for a Facebook scam and because of this, your Facebook account has become compromised and is now redirecting you to a malware landing page when you log on.  I would recommend contacting Facebook for help fixing your account.

    :1006859
Children
No Data