Recently, many worms have threatened users of Facebook, including Win32/Yimfoca.AA and Win32/Fbphotofake, which followed the older virus (which is still active in Facebook) called Koobface.

Specifically, Win32/Yimfoca.AA is located in the top ten list of ThreatSense.Net in many European countries such as Austria, Italy, the Czech Republic and Slovakia in recent weeks.

According to Marek Polesensky, Malware Researcher of ESET, the Yimfoca worm uses Facebook chat to attack users, while Fbphotofake is a social engineering worm, which attacks victims by itself but also in combination with other malicious software through spam messages on Facebook. “The Yimfoca worm acts as a backdoor and can be controlled remotely, transmitting the virus through IM software such as Skype, MSN or Yahoo Messenger».

Moreover, Yimfoca can download and put into operation other malware programs circulating on the Internet – including rogue anti-virus software, by changing security settings or turning off the firewall in Windows. The Fbphotofake worm appears mainly as spam on Facebook. Users are advised to be careful not to open suspicious and unknown attachments or click on dubious links.

About the recent malware attacks, David Harley, Senior Research Fellow of ESET, noted the spread of the Nigerian letter scam on Facebook. “It is a typical case of Advance Fee Fraud (AFF), with an extra emotional blackmail,” says Harley. Moreover, he advises users to “Be always sure of the identity of the sender of instant messages or the content of messages on Facebook”. Also, Randy Abrams, Director of Technical Education of ESET North America, notes that “Part of the problem is that the philosophy of Facebook does not include security and this is a very difficult hurdle for specialists in the field of antivirus and security”.

Recent threats on Facebook include the following:

• The Win32/Yimfoca.AA worm has reached the Top Ten list of ThreatSense.Net in several European countries in recent months.
• Fbphotofake spreads spam on Facebook. For the case of the two worms mentioned above, users must be careful not to open suspicious and unknown attachments or click on dubious links.
• The Nigerian letter scam is spreading through the messages in Facebook, too.
• Koobface worm which is one year old but can be found sometimes nowadays as well.

Information about safety in Facebook can be found here:

If you are infected from any of the above viruses (especially Koobface), download Spyware Doctor 2011 below to clean up your computer. I suggest you to Download the trial version of the software and run it on your PC. If the tool finds any of the Facebook viruses, you can purchase the full version to clean up the infection.