Facebook users are now a target of a new virus attack that is being spread through emails. Apparently Facebook users are getting emails with the title “Update Account Agreement”. The email is pretended to be sent out by the Facebook Team and encourages the users to download an attached zip file, “agreement.zip”.
The email message has been cleverly drafted and banks on the latest privacy changes. It informs the users that due to the recent privacy changes, all users would have to submit a new account agreement to Facebook. The email then goes on to ask the users to unzip the attachment and run the “agreement.exe” file if they want their Facebook accounts to have unrestricted access to Facebook features.
If a user falls for this trick, the exe installs a rogue antivirus Security Tool on the computer. Once installed the virus continues to display misleading virus infection messages, restarts the computer every now and then, prevents the users from running executable files and occasionally renders the computer unusable by displaying a blue screen of death.
The full content of the email is pasted below:
Dear Facebook user,
Due to Facebook policy changes, all Facebook users must submit a new, updated account agreement, regardless of their original account start date. Accounts that do not sumit the updated account agreement by the deadline will have restricted access to Facebook.
Please unzip the attached file and run “agreement.exe” by double-clicking it.
Thanks,
The Facebook Team
We are all too familiar with these hoax mails from the days of Hotmail and Yahoo Mail, when users received such emails and had to follow certain instructions in order for their email accounts to remain active. With the popularity of Facebook, the malicious entities have now switched their focus towards the social networking giant.
Panda Security Labs, a web security firm, has detected 16,000 Account Update email messages sent out to Facebook users since yesterday.The massive flooding of recent hoax chain message, regarding Automation Labs and the paranoia that it created, suggests that a large majority of Facebook users receiving such an email would likely fell for this trap.
If Facebook would ever have to communicate with you, it would do so via a message in your Facebook message box, rather than an email message. Be advised and not to open any such email. Make sure to let your Facebook friends know about this latest threat as well.
![[Inside Social Apps 2012]](http://www.allfacebook.com/wordpress/wp-content/themes/allfacebook2/images/ISA2012_336x100_F_RegisterNow.gif)
![[AllFacebook Stats: Facebook Analytics for Your Business]](http://www.allfacebook.com/wordpress/wp-content/themes/allfacebook2/images/stpro_allfacebookstats.gif)
![[How can Facebook change your business?]](http://www.allfacebook.com/wordpress/wp-content/themes/allfacebook2/images/FMB_A_MAY2011_336x100_F.gif)
It's sad that so many people are gullible enough to fall for this. I knew it was a hoax when the email address it was sent from was mine!
Comment by Carter Burger — February 17, 2010 @ 6:29 am
@Carter – so true!
Comment by Eran Betzalel — February 17, 2010 @ 7:16 am
Actually I dont what but there is something wrong with facebook sharer I dont think this article shared 715 times
I have same problem on my website..
Comment by Jason — February 17, 2010 @ 10:37 am
I think the biggest red flag is the zip file attachment, when the message says to open an exe.
Comment by Air Rifle Scope — February 17, 2010 @ 10:52 am
Pretended? lol since when was that even a word…. Grammar people!!!
Comment by Michael — February 17, 2010 @ 5:22 pm
Actually scratch that since when did it ever make sense in a sentence thats sounds like this " The email is pretended to be sent out by the Facebook Team"
Comment by Michael — February 17, 2010 @ 5:25 pm
Another benefit to using a Mac – not having to deal with these shenanigans
Comment by Andy Colwell — February 17, 2010 @ 7:54 pm
Another good reason for using Ubuntu.
Comment by Greg Wood — February 18, 2010 @ 7:25 am
Another good reason for not being a member of Facebook
I had this email even if I am not a facebook member
Comment by Tomie — February 20, 2010 @ 7:17 am
can I have my old facebook back please
from David Gaudet
write back soon please
Comment by David Gaudet — April 23, 2010 @ 5:11 pm