This week I've been trying to help a friend of a friend with her computer. The problem is that from time to time, her Facebook account starts posting posts, from her, that tells people how they can get a free iPhone by googling for a specific code and following the initial link that pops up.

Here's an example of what the message looks like, the original one is in Norwegian, so I translated it, but I also changed the code, I don't want anyone to propagate this spam any further with my help:

Hi :D A few days ago it was mentioned on TV that you can get the new iPhone X for free in a very simple manner :) Just type this code into a Google search: HXC1234XYZ and click on the first link available at the top.......

My question is simply this: Does anyone know which mechanism they use for this specific thing? I am trying to rid her computer or whatnot of this problem so that her account no longer gets these posts.

Bear in mind that I'm specifically not asking for how to troubleshoot this problem in the general sense, that's too broad, I want to know if anyone know exactly what is posting this very specific post so that I can remove that specific problem.

Here's what I looked at:

  1. Installed software, couldn't see anything out of place
  2. Installed plugins in her browser, there was one there, "Important Browser Update", this was firefox. Firefox updates itself, I removed this one but I don't know conclusively that it was this plugin.
  3. Tightened her security
    • Reset her Facebook and email password, and raised the complexity of her passwords from "laughable" to "strong"
    • Disabled the ability of all 3rd party apps or websites to connect to her Facebook account (Settings, Apps and websites, Preferences, Apps, websites and games), this was "turned on", I turned it off.
    • Removed two applications that were listed on the Facebook page as active (Settings, Apps and websites, Active apps and websites), Seedr and Pinterest (the latter is most likely the real deal but since she cannot remember ever using this app I removed it)
  4. Made sure Windows was updated

Since I don't know exactly what causes the specific post in question, I don't know if these measures are enough or if there's something else I need to do.

closed as off-topic by slhck, n8te, Moab, fixer1234, Twisty Impersonator Jan 13 at 22:43

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "This question is not about computer hardware or software, within the scope defined in the help center." – n8te, fixer1234
If this question can be reworded to fit the rules in the help center, please edit the question.

  • I'd tend to vote to migrate this to Web Apps, but otherwise a reasonable question that can be generalized. – slhck Jan 11 at 7:59
  • 1
    Does it only happen when the computer is powered on? – grawity Jan 11 at 8:10
  • That is a good question, but her computer is rather quiet so she told me she always just leaves it on and lets the screen go into power saving mode. – Lasse Vågsæther Karlsen Jan 11 at 8:21
  • I see the close votes and I would tend to agree but I think the question is going to be off topic on every site in the Stack Exchange network because it doesn't specifically involve only one thing. It is about web applications, Facebook, but it is also about Security, and most likely there is Software involved. As such, all sites can probably rightfully claim that it is off topic. I'm hoping to get an answer on at least one site so I'll happily migrate it if there is a site where this is definitely on-topic, but Web Applications will most likely claim it is a security issue, or malware. – Lasse Vågsæther Karlsen Jan 11 at 8:23
  • 1
    What is not clear to me after reading your question: are the posts still occuring after what you did? I would say the most likely reasons are fixed in your Nr. 3... – Tobias Jan 11 at 8:28

Browse other questions tagged or ask your own question.