Trojan horse viruses have always swept over popular websites like Craigslist, Myspace and now there is a new virus that is attacking Facebook. On October 27th, 2009 http://www.mashable.com/ released an article that was entitled, "Facebook Password Reset Confirmation Email Contains Virus [ALERT]". In my research I found that if you receive this message the body of the email will appeared as follows:
Hey vguysville,
Because of the measures taken to provide safety to our clients, your password has been changed.You can find your new password in attached document.
Thanks,
The Facebook Team
This particular email seems like the Facebook team is consciously reaching out to members by asking you to reset your password. But the direct result of clicking on this link is a trojan horse virus. It will proceed to download into your hard drive, and then unleashes a series of infectious files that will start to "bubble up, and then puss" out into a chain reaction by launching executable files that will connect to remote hosts. This process will in turn start downloading more malicious software from the web.
This trojan horse virus is described as variation a of "Bredolab" virus. It can bypass your computers firewall, which is like the protective coating around your computer that prevents outside hijackers form accessing important files on your computer, like bank statements or credit card numbers. Bredolab can finesse its way around your firewall by injecting its own code into your computer by attaching its own executable files onto common files like explorer.exe (a command file that starts Windows Explorer). In addition, the "Bredolab" virus can also go into stealth mode, which means it is smart enough to quit itself when an Anti-Virus program investigates its actions.
Taking preventive steps is the best way to save yourself form these nasty files. So always be on the lookout. If an email looks like it is out of the ordinary, think twice. "Do I really need to click on what is being offered right now?" Or, If a friend sends you a strange message, take a second and write a reply and ask, "Did you send me this funny email?" That way you can protect yourself from these email hoaxes.
In the unfortunate occurrence that a trojan horse is opened on your computer you should first disconnect from the Internet. On a desktop, disconnect the ethernet cable. On a wireless, click "Connections", then right click on "Wireless Connections", and then click "Disable". These viruses can burrow into multiple areas, and are difficult to unearth manually. So, the most practical solution is to download an anti-virus(AV) program like AVG (http://free.avg.com/us-en/homepage) or Avast(http://www.avast.com/) and run a virus scan (or if you have and AV already installed, try running the virus scan, if it has not already started). These programs will assist you with the removal process by displaying information about the infectious files and how to quarantine them.
Be aware! Running one Anti-virus program is not always the solution. If you have the funds, it may be critical to buy a program like Adwarebot(http://www.adwarebot.com/download.php). This preventive step is important because some trojan horse viruses are designed to disguise themselves when specific programs investigate them. I had a friend who actually bought Anti-Virus software to help solve his virus problem. Although, after his computer was scanned and claimed to be clean his "G" and "H" still did not working properly. He then proceeded by purchasing Spyware Doctor(http://www.pctools.com/spyware-doctor/ ). This software found additional files that were not discovered by the AV program. Spyware Doctor found a keystroke counter virus. A keystroke counter is designed to copy every key you press, and can record valuable passwords and credit card numbers without you knowing. After the keystroke counter was removed from his computer, the "G" and "H" began functioning properly again. Yet, this still does not always mean that every single infectious file is removed. In conclusion, make sure you always run anti-virus software, keep you windows updated, change your passwords every month, avoid questionable sites, strange emails, and don't ever get "click happy" when browsing the Internet (be weary of what you click for). Having a smart defense in the future, will ultimately protect you from malicious viruses and keep you computer secure.
http://blog.mxlab.eu/2009/10/27/bredolab-masked-as-facebook-password-reset-confirmation/
http://mashable.com/2009/10/27/facebook-password-reset-confirmation/