logging onto facebook installs virus?

[krease]

Looks like somebody is exploiting a vulerability facebook says doesn't exist

Comments

[eaquaelegit]

Thanks for the heads-up. I'll keep my eyes open.

[countthesheep]

i got a vundo trojan virus on my desktop... i have no idea where i picked it up from, could it be from the same facebook vulnerability maybe? :(

[kait_the_great]

We run the laptops with non-admin accounts who can't install programs. From what you've seen, do you think we're safe?

This garbage is why I do it, and it keeps my DVDs from installing players, but I haven't confirmed it'll help against this sneaky *cough* garbage. So here's a test, I guess.

[krease]

Doubtful - otherwise that sort of strategy would be a lot more public. There's plenty of difference in that scenario between an exe that's an installer and an exe that's just a runnable - easy for a virus to masquerade as the other to bypass that protection.

I was probably asking for it though; I've been running without proper AV for a while now...I'll be on facebook again after I get a new AV installed.

On a side note, there was some more stuff that it did - it adds some "protected" registry entries that regenerate on reboot, which protect some files from being deleted. Those were a bit more painful to remove.