Hello , your facebook login is currently disabled! – Virus raspandit prin email

Se raspandeste prin email un nou virus sub forma de atasament. Subiectul mesajului este “Hello , your facebook login is currently disabled“, iar continutul sau suna astfel:

During the last days, our network has been attacked so we ask you to install the attached file. This will initiate a trusted connection to facebook and your location will be safe.
Facebook is trying to warn all of our users fast but our email capabilities are limited. Facebook would be very appreciative if you could transmit the attached utility to your friends and family as soon as possible.

Are atasata arhiva office.zip, ce contine fisierul infectat office.exe, ce are o detectie foarte mica pe VirusTotal.com: 5 din 48 de scannere.

Pentru DEVIRUSARE:

Descarcati ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Apoi asigurati-va ca ati inchis toate programele care ruleaza (yahoo messenger, firefox, etc)

Dezactivati temporar protectia Antivirus!
Rulati apoi ComboFix. Va va intreba daca sa inceapa curatirea. Confirmati cu Yes de fiecare data. Nu-l opriti in timp ce scaneaza si dezinfecteaza sistemul. E posibil ca in timpul rularii lui desktop-ul sa dispara.

Multumesc lui Farcas Gelu Danut pentru atentionare!

Administrator FaraVirusi.com
voluntar al Comodo Malware Research Team, expert Malwarebytes Anti-Malware

Leave a Reply