Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Nova atualizacao disponivel - major nuisance trojan payload

Hi,

First of all I run and have been running the free Sophos Anti-virus for Mac for the past year or more. Am running version 7.3.10C on Snow Leopard 10.6.8. I am based in Lima Peru...

Since yesterday afternoon I have been plagued with the message Nova atualizacao disponivel (in portugese no less) on Facebook regardless of what browser I try to use,,, Safari, Chrome or Firefox... See the screenshot for more...

Clicking the link tries to install an trojan masquerading as chrome.exe I simply force quit the browser here 

Steps I have taken to try eliminate this persistent popup are..

cleaning cookies, caches and history on all 3 browsers....

running a full sweep of the hard drive with the Virus Scanner (100% clean)

running a complete maintenance clean with OnyX and rebooting...

Let me stress here that my web browsing is not affected anywhere else but on facebook... after the reboot all seemed okay for a few hours and then suddenly the menace is back again!

Once this message appears I am effectively 'frozen out',,, and have to force quit... I am getting all sorts of issues from not being able to post to 404's and plain non-responsiveness when clicking on facebook links! Bottom line... Facebook has now become unusable on my mac...

I have done a terminal search for Flashback... all clear there too,,, 

Need your help

Thanks

Alex

Safari Example

firefox example

:1006841


This thread was automatically locked due to age.
Parents
  • I think there´s a virus or something inside my facebook account!

    When i refresh my wall, appears this message: "Nova atualizacao disponivel", and if i click the ok button it downloads an ChromeSetup.exe file.

    I only happens inside Facebook with Safari and Mozilla Firefox (Mac OS X).


    Please Help!

    Thank You!

    :1006981
Reply
  • I think there´s a virus or something inside my facebook account!

    When i refresh my wall, appears this message: "Nova atualizacao disponivel", and if i click the ok button it downloads an ChromeSetup.exe file.

    I only happens inside Facebook with Safari and Mozilla Firefox (Mac OS X).


    Please Help!

    Thank You!

    :1006981
Children
No Data