How to get rid of the Facebook malware which sends pornographic posts in all the groups you belong to? I always made fun of people who became victim of this malware/virus saying they are not cautious enough, but today morning, I woke up and find I have posted obscene posts in all the groups.
I removed a few apps, which I thought were suspicious and I also checked the browser extension along with recently installed programs, but I couldn't find anything and in the end, so I had to deactivate my Facebook. This was one of the most embarrassing days. I never thought I could become a victim being so cautious while browsing the Internet.

  • 3
    +1 for giving me a feeling of Schadenfreude. Could it be possible that your facebook password got leaked?
    – Philipp
    Aug 17 '15 at 14:06
  • Questions about how to remove malware from your machine are off topic here.
    – schroeder
    Aug 17 '15 at 16:41
  • @schroeder That's why i added a PS. Although, i wanted to know more about malware rather than just removing them because i removed all the browsers, and made Linux my primary OS which was secondary and that did help. It was most probably a chrome plugin which i don't recall installing. I thought that i'd gain some knowledge about this threat and make others aware who are less knowledgeable. I appreciate the help i got here. Aug 18 '15 at 15:13

Go through the apps you gave some permission on facebook. Especially the "post on my behalf" permission. Remove any you don't trust (or don't remember giving them permissions).

Anyway, it might be a one time thing, and there is nothing to get rid of. Read through this blog post for more information.

In the extreme case, you might be indeed infected by malware (I don't think so in case you were really cautios and don't remember running any executables). However, if this is the case I recommend scanning your PC for malware (there are various forums out there where you can get help with this).

  • 1
    I wanted to upvote you (for the first part) but I can not because what you mentioned in the second part is incorrect: if your machine is infected, it won't infect your Facebook, Gmail, Twitter ... accounts. Regards
    – user45139
    Aug 17 '15 at 13:30
  • Yes, I never installed such apps on first place except a game(Marvel avengers alliance) and apps like Instagram, Interview Street etc. I checked my apps because those are the basic things but i couldn't find anything, although there were some old apps which i don't really use so i removed them as well. The link you gave mentions something about close button of a pop-up, that might be the reason and it might have got executed in background. I will give my system a restore for 2 days range and reinstall the browsers again to see if it works. Aug 17 '15 at 13:37
  • @begueradj I tended to think exact the same way. Anyway, after a few articles like this seclists.org/fulldisclosure/2015/Jan/131 I chose to mention it in the answer. However, I had no chance to test the mentioned executable (or any similiar) by myself, yet. Therefor, probably I shouldn't have include it as I'm not 100% sure it is posibble.
    – bayo
    Aug 17 '15 at 13:50
  • 4
    @begueradj Go ahead and explain me how a malware that has full access to a PC cannot post something on your behalf on Facebook. Yes, the "second part" of his answer is less likely than the "first part" but it still is a plausible scenario.
    – Simon
    Aug 17 '15 at 15:33
  • 3
    @begueradj Given browsers cache sessions and often even passwords it is entirely possibly sufficiently cunning malware could extract the users Facebook password or session cookies and either distribute them or use them to make posts etc.
    – Vality
    Aug 17 '15 at 16:17

Not the answer you're looking for? Browse other questions tagged or ask your own question.