I recently become aware that there is a new virus spreading on FaceBook chat, that behaves almost like the older MSN virus that added virus links in fake chat messages.
I dont have it myself but quite of my friends got it, and I get fake chat messages from them with an included link.
The message looks like this "hehe funny
(I replaced some of the url with *** for security reasons)
If you click on it, you will be directed to a Facebook page saying: "This photo has been moved to other location. To view this photo click View Photo."
At the same time a download box appears so you can download the fake picture that actually is an EXE-file.
If you run the file, you will get the virus yourself !! DONīT do that !!
I saved two of those files, and scanned them at jutti.org, they gave not exactly the same result.
You can see a picture of the two scans here: http://sphotos.ak.fbcdn.net/hphotos-ak-ash1/hs752.ash1/164370_10150170459479256_671244255_8558013_7324040_n.jpg
Now I would like to know if there is a removal tool for this virus, or should my friends just run ComboFix ?
I can send the files to BleepingComputer to examine if that will help to get an removal tool !