Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 6 subscribers
  • Views 1185 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Nova atualizacao disponivel - major nuisance trojan payload

abraxas

Hi,

First of all I run and have been running the free Sophos Anti-virus for Mac for the past year or more. Am running version 7.3.10C on Snow Leopard 10.6.8. I am based in Lima Peru...

Since yesterday afternoon I have been plagued with the message Nova atualizacao disponivel (in portugese no less) on Facebook regardless of what browser I try to use,,, Safari, Chrome or Firefox... See the screenshot for more...

Clicking the link tries to install an trojan masquerading as chrome.exe I simply force quit the browser here 

Steps I have taken to try eliminate this persistent popup are..

cleaning cookies, caches and history on all 3 browsers....

running a full sweep of the hard drive with the Virus Scanner (100% clean)

running a complete maintenance clean with OnyX and rebooting...

Let me stress here that my web browsing is not affected anywhere else but on facebook... after the reboot all seemed okay for a few hours and then suddenly the menace is back again!

Once this message appears I am effectively 'frozen out',,, and have to force quit... I am getting all sorts of issues from not being able to post to 404's and plain non-responsiveness when clicking on facebook links! Bottom line... Facebook has now become unusable on my mac...

I have done a terminal search for Flashback... all clear there too,,, 

Need your help

Thanks

Alex

Safari Example

firefox example

:1006841


This thread was automatically locked due to age.
Parents
  • 0

    Hi Andrew,

    Thanks for the advice,,, alas much easier said than done.... Bigger Nightmare! Have done something that involves re-setting my password and logging in using https... if that doesn't do the trick I'm simply going to have to nuke the account it seems. Direct help nowhere to be got on Facebook! Am wondering if this could have been triggered by my android phone.... most probably!

    No clue what triggered this as I am extremely wary of dud links... will not even accept links that prompt me to use apps etc... and in particular those cancer babies etc... You confim here exactly what I have maintained that the issue lies on Facebooks server and not on my Machine,,, WIll have to hope its sorted now...

    Regards!

    :1006863
Reply
  • 0

    Hi Andrew,

    Thanks for the advice,,, alas much easier said than done.... Bigger Nightmare! Have done something that involves re-setting my password and logging in using https... if that doesn't do the trick I'm simply going to have to nuke the account it seems. Direct help nowhere to be got on Facebook! Am wondering if this could have been triggered by my android phone.... most probably!

    No clue what triggered this as I am extremely wary of dud links... will not even accept links that prompt me to use apps etc... and in particular those cancer babies etc... You confim here exactly what I have maintained that the issue lies on Facebooks server and not on my Machine,,, WIll have to hope its sorted now...

    Regards!

    :1006863
Children
No Data