Submission + - Latest Facebook virus is a double combo (www.kgk.gr)
kgkoutzis writes: The latest virus spreading around Facebook via friend messages is actually two viruses in one. The virus is passed around in a Windows executable called 'photo.exe' and is also known as 'Facebook Surprise' because of the message it uses to lure users ('I got you a surprise'). As soon as the file is executed in a Windows PC, it extracts two new executable files in the hidden Windows folder 'Application Data' (or 'AppData'). The first file immediately starts abusing the Facebook mobile protocol to mass message all the friends of the victim with a link to photo.exe, while the second file installs the well known "Security Tool" virus which slows down the computer and urges users to buy a fake antivirus in order to steal their credit card information.
