Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Warning 

The "LOL" Facebook message infection [.jar dropper | CPU Miner | Keylogger]

(May 20, 2014 02:11 PM)Aura Wrote:  No problem buddy, stay safe.

I guess the worm has been modified to it spreads through other means. Facebook and now Skype as well.

It's been on Skype for quite some time actually, I'm pretty sure it was originally for Skype and this Facebook version is a new strain of it.

The Skype message was the same type of thing that you mentioned in the OP, but I remember getting it maybe 4 months back.
(Feb 3, 2018 03:19 PM)kickball34 Wrote:  i'm gonna get your ip address and rat your pc.
(May 20, 2014 02:13 PM)grady Wrote:  It's been on Skype for quite some time actually, I'm pretty sure it was originally for Skype and this Facebook version is a new strain of it.

The Skype message was the same type of thing that you mentioned in the OP, but I remember getting it maybe 4 months back.

The article mention that it's a new variant of another malware (Zusy Trojan), so I guess that might be it.
Fiat justitia ruat cælum

My era of providing technical support and malware removal on HackForums is over, so you can stop PM'ing me about it. Sorry.
Thanks for the heads up.
That is pretty idiotic if you open it up. 😅
[Image: Go9NL9v.png]
(May 20, 2014 02:16 PM)ZuGgY Wrote:  Thanks for the heads up.
That is pretty idiotic if you open it up. 😅

For people who know what's out there, it's idiotic.
For the average computer user, it's a friend sending them a picture.
(Feb 3, 2018 03:19 PM)kickball34 Wrote:  i'm gonna get your ip address and rat your pc.
I feel like if I am at the point where I feel I should run in a VM or sandbox I probably shouldn't run it at all. Kaspersky Reputation FTW.
(May 20, 2014 02:54 PM)Daxe Wrote:  I feel like if I am at the point where I feel I should run in a VM or sandbox I probably shouldn't run it at all. Kaspersky Reputation FTW.

Kaspersky is love, Kaspersky if life buddy.
This is the universal truth.
Fiat justitia ruat cælum

My era of providing technical support and malware removal on HackForums is over, so you can stop PM'ing me about it. Sorry.
(May 20, 2014 03:09 PM)Aura Wrote:  Kaspersky is love, Kaspersky if life buddy.
This is the universal truth.

Kaspersky is so OP ! I love to death that antivirus : )

Still, is there a way to remov that nasty thing from the pc's? I would love to help my buddy's out :/
(May 20, 2014 03:10 PM)Dr. Manhattan Wrote:  Kaspersky is so OP ! I love to death that antivirus : )

Still, is there a way to remov that nasty thing from the pc's? I would love to help my buddy's out :/

I don't remember the EXACT procedure SPECIFIC to that malware since when I do a clean-up, I go all the way and remove everything at once but my normal clean-up procedure got rid of it.
Fiat justitia ruat cælum

My era of providing technical support and malware removal on HackForums is over, so you can stop PM'ing me about it. Sorry.
Thanks for this post OP! I've gotten a few of these, but I never click links >.> 👍
I only do deals onsite through PM's/Contracts.
I do not use Discord, or Skype, or talk to members offsite whatsoever.
(May 20, 2014 03:14 PM)bοxxy Wrote:  Thanks for this post OP! I've gotten a few of these, but I never click links >.> 👍

No problem buddy, stay safe and continue not clicking random links 🙂
Fiat justitia ruat cælum

My era of providing technical support and malware removal on HackForums is over, so you can stop PM'ing me about it. Sorry.
(May 20, 2014 02:36 PM)grady Wrote:  For people who know what's out there, it's idiotic.
For the average computer user, it's a friend sending them a picture.

Yah this. Most people are not aware of the potential risks out on the web especially if its one of their "friends" sending them a file.
[Image: M7tJcZL.gif]
But tell me something, the file may be named ".zip" but when you download it, the browser especifically show's the file extension or am i wrong?
I know some web hosts don't show the extension, but all browsers do?

Just asking.
(May 23, 2014 10:24 AM)He B TeMy Wrote:  But tell me something, the file may be named ".zip" but when you download it, the browser especifically show's the file extension or am i wrong?
I know some web hosts don't show the extension, but all browsers do?

Just asking.

They show the extension but someone can think "Oh he sent the picture in a .zip file because it was too big or something". Also, a lot of people wouldn't understand why it's fishy to get a .zip file for a picture.
Fiat justitia ruat cælum

My era of providing technical support and malware removal on HackForums is over, so you can stop PM'ing me about it. Sorry.
(May 23, 2014 11:03 AM)Aura Wrote:  They show the extension but someone can think "Oh he sent the picture in a .zip file because it was too big or something". Also, a lot of people wouldn't understand why it's fishy to get a .zip file for a picture.

Oh, sorry, i misread your OP, i thought you typed "they download a jar file which shows only as .zip if you have that setting disabled." that's why i asked if the browser didn't show the file real extension... i should re-read before i post..

Now i understand what you said, :)
(May 20, 2014 12:45 PM)RedSpyGentlemen Wrote:  Sometimes I download those on purpose to see what it will do.
I run it in sandboxie.

Lol never thought of this imma try it 😏


Possibly Related Threads...
Thread / Author Replies Views Last Post
by UfopwSep 8, 2022 04:36 PM 8 444 Sep 8, 2022 04:36 PM
Last Post: kittycat888
by MarieteeAug 20, 2020 06:23 AM 1 165 Aug 20, 2020 06:23 AM
Last Post: Mafalda-Hoka Elements
by EASY_HAXApr 4, 2017 06:44 AM 7 259 Apr 4, 2017 06:44 AM
Last Post: SonnyTheBear