I have a facebook question....wait don't leave yet. I have no facebook and this is not pertaining to me. Other members of the household all have facebooks and recently a few of them have no been able to sign on. Password didn't work. So they changed their passwords and minutes later their new passwords didn't work. I ran a hitman scan on their computers and, of course, they had viruses. Adware and the like. They were removed but their facebooks seem to have been "hacked" They're all idiots of course and one of their computers has a Win32 persistant virus that I couldn't remove. Now I'm no malware forensics expert but try as I may the computer is sick and needs a geekier geek than I. Also their yahoo accounts password are changed and they can't get on to them either.
I'll get to my question. Are their facebooks being individually messed with or is there a virus that is spreading itself through the home network? Or something else. I am not sure what to tell them is wrong with their shit.
It sounds like they all use the same computer, and someone downloaded something they shouldn't have (for example, a game item-duplicator that had a stealer attached to it). If multiple accounts are being affected, 8/10 it's a stealer, the other 2/10 a keylogger. Login to that computer, put wireshark on it, then make a batch file that will have it listening on start-up. Look through the logs and check for smtp/ftp information. I'm 90% sure that you'll find account information logging in to a remote server somewhere.
If you can't do that, arp-poison your network, have wireshark or ettercap ready to go, then turn that computer on. <-- same effect, except you'll see the information on your computer if you do happen to be dealing with a stealer/keylogger.
Like I said let me know how it goes. If you get account information, I'll guide you through cleaning shit up if you need help. If you don't get account information, get one of those boot-up anti-virus disks.
