A new virus is currently circulating at Facebook. This particular virus is made to generate advertising profits for its developer. It spreads through the social network's instant messaging service, prompting recipients to view a video. Here's a short one analysis.
Of course there is no video, but a fake facebook page. If someone clicks to "watch the video" they will be taken to a website, a clone of Facebook. The addresses given by malicious users are different each time, but they lead to the same fake website. The website has several differences from the original social network page, but the most important and most obvious is the URL.
The only URL that works on the malicious website is DOWNLOAD, and the address is as follows:
The URL contains click tracking, ie it monitors where the click was made and behind it hides the following URL
The above links are known as malicious to updated and reliable anti-viruses and will stop it λήψη.
However, if someone has downloaded the malware and started seeing pop-ups from lp.ilivid.com, they will immediately uninstall the malware installed on their computer. They usually have the following names:
flash-enhancer, SafeSaver, DP1815, Video player, Convert Files for Free, Plus-HD 1.3, BetterSurf, Media Player 1.1, PassShow, LyricsBuddy-1, YutubeAdBlock 1.2, Media Player 1.1, Savings Bull, Feven Pro 1.1, Websteroids, Savings Bull, HD-Plus 3.5, QuickShare, Lightspark, Surfact, Software Version Updater, Media Viewer 1.1
Immediately after that you should uninstall the pop-up ads from Internet Explorer, Firefox και Google Chrome.
At Internet Explorer, this is done by Internet Options or by Internet Options. From Internet Options click on the Advanced tab, then click on Reset. In the window that opens, click Delete personal settings, and click Reset.
To remove lp.ilivid.com pop-up ads from Firefox, go to the Help and select Troubleshooting Information. Click on the Reset Firefox button and Firefox will reset all its default settings. Do not forget to save the changes.
To remove lp.ilivid.com pop-up ads from Chrome, you need to go to the Chrome menu, select Tools and then Extensions. In the Extensions tab, remove the RightSaver, SafeSaver, DP1815, Video Player, Convert Files for Free, Plus-HD 1.3, BetterSurf, Media Player 1.1, PassShow, LyricsBuddy-1, YutubeAdBlock 1.2, Media Player 1.1, Savings Bull, Feven Pro 1.1 , Websteroids, Savings Bull, HD-Plus 3.5, QuickShare or any extensions you do not know.
After all this, you should also use AdwCleaner that you can download from here. Another trusted program you can use is Malwarebytes, which you can download from here.
We thank our friends from this safer-internet.gr who informed us in time of the existence of the malicious software.
