A new virus is currently circulating on Facebook. This virus is designed to generate advertising revenue for its developer. It spreads through the social network's instant messaging service, and prompts recipients to watch a video. Here's a brief analysis.
Of course there is no video, but a fake Facebook page. If someone clicks to "watch the video" they will be taken to a website, a clone of Facebook. The addresses delivered by the malicious users are different each time, but they lead to the same fake website. The website has several differences from the authentic page of the social network, but the most important and most obvious is the URL.
The only URL that works on the malicious website is DOWNLOAD, and the address is as follows:
The address contains click tracking, meaning it tracks where the click was made and hides the following URL behind it
The above links are known to be malicious by up-to-date and reliable anti-viruses and will stop the download.
If someone nevertheless downloads the malicious program and starts seeing advertising pop-ups from lp.ilivid.com, they should immediately uninstall the malicious programs that have been installed on their computer. They usually have the following names:
flash-Enhancer, SafeSaver, DP1815, Video Player, Convert Files for Free, Plus-HD 1.3,BetterSurf, Media Player 1.1, PassShow, LyricsBuddy-1, YutubeAdBlock 1.2, Media Player 1.1, Savings Bull, Feven Pro 1.1, Websteroids, Savings Bull, HD-Plus 3.5 , QuickShare , Lightspark , Surftastic, Software Version Updater, Media Viewer 1.1
Immediately after that, you should uninstall pop-up ads from Internet Explorer, Firefox and Google Chrome.
In Internet Explorer, this is done from Internet Options. From Internet Options click on the Advanced tab, and then click on Reset. In the window that opens, click on Delete personal settings, and click on Reset.
To remove lp.ilivid.com pop-up ads from Firefox, go to Help and select Troubleshooting Information. Click on the Reset Firefox button and Firefox will reset all its default settings. Don't forget to save the changes.
To remove lp.ilivid.com pop-up ads from Chrome, you should go to the Chrome menu, select Tools, then Extensions. In the Extensions tab, remove RightSaver, SafeSaver, DP1815, Video Player, Convert Files for Free, Plus-HD 1.3, BetterSurf, Media Player 1.1, PassShow, LyricsBuddy-1, YutubeAdBlock 1.2, Media Player 1.1, Savings Bull, Feven Pro 1.1, Websteroids, Savings Bull, HD-Plus 3.5, QuickShare or any extensions you don't know.
After all this, it would be a good idea to also use AdwCleaner, which you can download from here. Another reliable program you can use is Malwarebytes, which you can download from here.
We thank our friends from safer-internet.gr who informed us promptly about the existence of the malicious software.
Source: secnews.gr
