[ShadowWolf]

Good to know, will be more careful on facebook now. Not that I am not careful anyway.

[RƎDSPY]

Sometimes I download those on purpose to see what it will do.
I run it in sandboxie.

[ShadowWolf]

Shit, I should really start to create documentation on every new malwares I remove and then send it to you guys 🤣

Perhaps someone should create a thread where people post new malware they find and how they have solved it. That way people trying to expand their knowledge could go and learn new methods or how to to identify certain malwares.

[Daxe]

I feel like if I am at the point where I feel I should run in a VM or sandbox I probably shouldn't run it at all. Kaspersky Reputation FTW.

[He B TeMy]

But tell me something, the file may be named ".zip" but when you download it, the browser especifically show's the file extension or am i wrong?
I know some web hosts don't show the extension, but all browsers do?

Just asking.

[He B TeMy]

They show the extension but someone can think "Oh he sent the picture in a .zip file because it was too big or something". Also, a lot of people wouldn't understand why it's fishy to get a .zip file for a picture.

Oh, sorry, i misread your OP, i thought you typed "they download a jar file which shows only as .zip if you have that setting disabled." that's why i asked if the browser didn't show the file real extension... i should re-read before i post..

Now i understand what you said, :)

[whitey0ext]

Sometimes I download those on purpose to see what it will do.
I run it in sandboxie.

Lol never thought of this imma try it 😏

[Haste.]

Thanks for the alert, Aura. I appreciate it. I will make sure to be on the lookout for any infected friends.

[mrpopsikle]

Thanks for the info Op but i never download shit off facebook anyway lol

[Aceman]

I remember getting infected from this back when I was 13 on MSN, thanks for the heads up Aura 🤝.