bebo virus

THE_NIK

through bebo mail from trusted source friend ect.

message starts with

wow.... or..... ohh my god

and subject is

you look good in........

picked up on it this morn dont know nothin about it only it hit a few people all ready..

lisbon_lions

Thanks for sharing that.

Got it myself this morning, clicked on one of the links and it brought me to a warning page stating that the site attempts to download executables to your HD without consent, so just shut the window down.

barnicles

Thanks

Not on Bebo myself but told friends

Eoin

Got the same from facebook, but Firefox and/or google gave me a warning. I think the URL looks like a google one, but with some dodgy TLD.

barnicles

But why is this in programming?

There's a thread in V&MR aswell FYI.

anthonymcg

Got two messages on this late last night. Didn't click the links cos they looked dodgy.

branne2003

I stupidly and unknowingly clicked the links and infected the family PC. Can anyone tell me how to get rid of this is the cheapest most painless way possible?

Eoin

branne2003, there's actually a forum dedicated to this stuff here. I would start with this program though: http://free.avg.com

Evil Phil

Moved from programming.

heresjonny30

My Mrs clicked this yesterday and nearly killed the laptop. boo!

One of the best and most trusted anti spyware/malware programs to run is malwarebytes. Website: http://www.malwarebytes.org/

You can upgrade to the pro version but the free version is excellent. you may have to big button you machine and restart in safe mode with networking to download, install and run.

I found a file called algg.exe in this folder: c:\windows\system32, there is another file next to it called alg.exe but this is a safe file. Check the date modified for the file, and it should match the date and time that you clicked the link. delete the algg.exe if you can but malware bytes will/should pick it up. Its also worth sorting this folder by date modified and ditching other files modified at around this time. A couple of other files I deleted had random numbers and letters making up the file name.

After running the malwarebyte scan I also ran my virgin virus scanner everything came back clean. I usually run this in "on access mode"

Hope this helps, also worth clearing all you internet cookies and temp files. Change your passwords once your machine is clean. Clear you recycle bin.

Think before you link!!!!

good luck

hj30

tom_ass19

Im getting about two a day from friends, first i saw i just lol'd to myself

Didnt even think about opening them, just deleted them. Im just wondering how is it done?

Mimikyu

This post has been deleted.

Shamanic

just got this too, clicked it:rolleyes:

a big red page came up but i clicked out straight away, i run my laptop through mozilla and use mcAfee, running a virus scan at the moment, so far through 60,000 files, what are the chances ive picked up something?:(

Oh isnt everyone glad they use firefox.

_CreeD_

There was a really good advert here in the states that had real people acting out Phishing and Virus scam emails, and of course the folks they were directed at refused them. What makes online so different psychologically?
You do not have to click every link that comes your way....it's okay....:p
On the other hand I make my living a from Infosec so as long as folks do keep up the promiscuous clicking I won't have to worry about my rent.

NicsM

It's the link not the mail itself that contains the virus, yes? I opened one from a good friend yesterday but didn't click the link.

_CreeD_

It depends really. I don't use Bebo so I don't know if they allow HTML inside their email system, I'm guessing they do. It is possible to embed malware within a web page that can begin infecting your machine simply by visiting the site but it's not easy to do. Just make sure you have an AV package that does HTTP inspection (i.e. looks inside web code as it downloads), Firefox as mentioned earlier with noscript (and Firekeeper optionally but noscript is the single best option) is also a very good combination.
The main thing though is never click unsolicited links no matter how tempting, even if you think you have enough protection in place. There are a lot of very smart organised people out there making a lot of money by adding home PCs to their spam and botnets, it's not just some lone malicious geek in the basement anymore, they know the security products on the market and they are constantly coming up with ways to bypass them.

schiz0phren1c

Yeah got two of these but didnt get caught thanks to Firefox,
CreeD is right too,virus/trojan's worms etc are extremely complicated nowadays...
Of course where would the multi billion dollar/euro/cashola antivirus/antispyware industry be without viruses and spyware? its a discussion for another time and place,i'm just saying,antispy/virus companies are about as interested in ending viruses forever as an arms manufacturer would be in ending war.

Nothingbetter2d

i got 20 - 30 a day from bebo....... i since deleted my bebo account... no more bebo virus bebo sucks these days anyway mostly got invites from women selling porn... reminded me of my myspace ac which was also deleted many many moons ago due to huge spam and women selling porn invites.

pieface_ie

Basically speaking,Its done through "ActiveX" id say,when you access the site,the site loads executable source code onto your computer and compiles it and executes it.

if you are not carefully your practically going onto a site and downloading a file and executing it without knowing.

watch out for activex,or maybe install "no script" its a browser plug in for firefox,stops scripts been loaded in your browser,do it can be annoying when browsing as some sites dont function to well,but you have the option of allowing certain sites by just simple right clicking on the site and pressing "allow"

TechieEddy

The amount of spam on Bebo recently is crazy.
They really need to sort it our they are going to lose a lot members.

nobodythere

I have to say, one of the better efforts I have seen, very well put together. Sorry sometimes I have to stand back and appreciate the art of these

nobodythere

pieface_ie wrote: »

Basically speaking,Its done through "ActiveX" id say,when you access the site,the site loads executable source code onto your computer and compiles it and executes it.

if you are not carefully your practically going onto a site and downloading a file and executing it without knowing.

watch out for activex,or maybe install "no script" its a browser plug in for firefox,stops scripts been loaded in your browser,do it can be annoying when browsing as some sites dont function to well,but you have the option of allowing certain sites by just simple right clicking on the site and pressing "allow"

Nah, says you can't watch the video because you don't have the latest version of flash then tries to dl a file

mumhaabu

I have seen 4 pcs go down in a week directly because of this virus, reinstall with Kaspersky in future plus Firefox. AVG is losing cred fast I think.