LATEST UPDATE: There appears to be a new phishing scam on Facebook, please check out this post too.

Update, 7:21PM: Barely a couple of hours after I posted this, I already have gotten 4 16 54 a lot of Google searches about it. Also, the number of my infected Facebook friends has doubled. Please also digg this if you feel this information is useful so that it can reach a wider audience.

facebook-malware-notification

OH HAI! NOTIZES GENERATED BY SPAIZWARE

Warning: There’s a new spyware/malware/worm/malicious application called “Error Check System” (sometimes mispelled as “Error System Check” on Facebook. I came across an unusual notification recently while browsing Facebook (see picture on the right).

What errors could there possibily be in my profile? Perhaps my profile picture was too handsome? I quickly decided it could not be the case, because if it were, the error should have happened much earlier from the time I uploaded my first picture. Kidding.
But seriously. First off, the grammar was wrong. The word ‘Messages’ should have been pluralized, instead of ‘Errors’.

And also, what possible errors could there be with a profile?

And really…wouldn’t Facebook notify you of errors somewhere else besides the Notifications pane?

So I did some looking around to see if it was legit. Take note of the captions in red btw.

So anyway, I clicked ahead, and I saw this:

facebook-malware-err

FAKE APPLIKASHUN IS FAKE

Curious, I checked out the application page. My guess was right, it definitely was not a legit/official Facebook application (captions added in red). The ‘Facebook Error Check System’ is not made by Facebook.

facebook-malware-app-page

IM IN YR FACEBOOK, STEALINGZ YR INFOZ

You’ll notice that the rogue app acts pretty fast. The same Facebook friends of mine who inadvertedly added the app  are the same ones who appeared in the Notifications panel earlier.

I did a Google search to confirm my findings, and found that it was probably a very new malware application - there only seemed to be 6 results in total for “error check system” facebook app. One of the pages however, was useful and led me to this page on Yahoo Answers.

facebook-malware-yahoo

I CAN HAZ ANSWERZ?

So whatever you do, do not add this application to your Facebook Apps!

DO NOT WANT

DO NOT WANT! APPLIKASHUN IS SPAIWAREZ!

Whatever you do, don’t add it. If you already have it, do remove it from your Facebook Applications list. While the effects are yet to be known, you definitely do not want a spyware app to have your profile information, photos, friends information, and other content.



Update 22 Feb 2009: Removal Instructions
1. You can see if the application has accidentally been installed by checking out the Facebook Edit Apps Page (make sure you’re logged in when you click that)
2. If it has, just get rid of it by clicking the ‘x’ on the right hand side of the application name.
3. Facebook will prompt a confirmation message. Then, click ‘Remove’
4. You’re done! It’s gone!

Update: 22 Feb, 4:10AM: There seems to be another site showing up quite high in the related google searches for this spyware app. And that site is a spyware site itself! and it will pretend to scan your computer - it will prompt you to install a malicious executable file (.exe program). It looks convincing, but it is not legit. DO NOT visit 2009022112.kajdoo.bee.pl/facebook_error_check_system.html , it is a SCAM!

Be safe, and happy poking! This message is brought to you by www.josh.my

Note: This post is by far, the most popular one on this blog. Why not check out the rest of my blog? There’s  posts about relationships, working life, and lots of clubbing photos with beautiful blogger chicks.




Reader's Comments

  1. maRCus | February 21st, 2009 at 6:23 pm

    izit..?! fuh. LUCKY dint click. i oso pelik, why got SO many errors on my page wan.. ahih. thnx for the word up. :-)

    ps. hope the paintball spirit is stil flaming, we shud be meeting up next week or so for a casual chat. keep u updated. :-)

  2. 112358 | February 21st, 2009 at 7:21 pm

    Good post, writing warning on my status to prevent the spread!

  3. Elad Nava | February 21st, 2009 at 7:56 pm

    I got this, too. Almost clicked Allow Access but I decided to google this application and it seems to be malicious. My question is how the fuck did they get Facebook to allow this malicious application and why hasn’t it already been shut down, although I am writing this on the same day as this article has been published.

  4. Crayons | February 21st, 2009 at 8:19 pm

    Thanks for the warning. I installed it too, and found it suspicious as my profile did not have any errors. I removed it immediately.

  5. Sam | February 21st, 2009 at 8:32 pm

    Hi Josh,

    Many thanks for this post - #1 hit on Google when I ran a check on “Facebook Application Error Check System”.

    Thankfully I did a search for it on Google and consequently did not install the application.

    Kudos for the tip!

    Cheers,
    Sam (from Melbourne, Australia).

  6. Elke | February 21st, 2009 at 8:33 pm

    Hi Josh,
    Thanks for posting this - I got that message this morning, but have become cautious of such things and instead googled it. Your information was what I was hoping to find - well done.
    Elke

  7. Sam | February 21st, 2009 at 8:51 pm

    Just an add on to my previous comment.

    Apparently, you don’t need to click “Activate”. I did not click activate and yet the Error Check System is added to the Applications Settings page, i.e.:

    http://www.facebook.com/editapps.php

    So yeah, I’ve now deleted the Application and changed my password.

    Thanks again.
    Sam.

  8. hafizuddin | February 21st, 2009 at 8:53 pm

    great job in warning ppl :D

  9. Karl | February 21st, 2009 at 9:02 pm

    Thanks for information. (… it was funny too!)

  10. Resident Kennedy | February 21st, 2009 at 9:07 pm

    Receiving more & more requests to run the app here in SG, the first i saw came from AU, not that that means much. Have advised everyone accordingly, now its wait and see time.

    BTW: i added a link to this page dood, hope you don’t mind.

    Res

  11. bethany | February 21st, 2009 at 9:11 pm

    i got this message from a friend…and she is freaking out right now because i marked her message as “spam” - if she installed it and removed it and changed her password….do you know if she will be okay on her account? i made an “update” message to all of my friends telling them not to install it.

  12. Becca | February 21st, 2009 at 9:23 pm

    Wow, that was lucky. I almost clicked it but my gut instinct was saying something was wrong so I searched it and this post came up. Thanks for sharing!
    BeccAGHH xx

  13. Stu | February 21st, 2009 at 9:33 pm

    Hi Josh
    .
    I came across this rogue application this morening, and found your webpage after doing a search to check if it was safe.

    I’ve made a Facebook group to spread the word that the “Error Check System” is fake and I hope you don’t mind but I’ve put a link to this webpage in the group.

    http://www.facebook.com/group.php?gid=52631326657&ref=mf

    Please join the group and I’ll make you an officer if you like.

    Yours,
    Stu

  14. MissyCheerio.com | Engraving the Chee in Cheerio. | February 21st, 2009 at 10:04 pm

    [...] as you can see,i’ve been online the whole entire day and I came across Josh’s blog post on the Facebook spyware/malware which I think you should just read up on.For the [...]

  15. Yoga | February 21st, 2009 at 10:08 pm

    Yeah, I got some notifications about this one too! I post a link to this page on my blog and Facebook page. Thanks anyway for the info.

  16. JPG | February 21st, 2009 at 10:21 pm

    Great job!

    Already sent this subject to all my FB contacts, and published your link via wall, Groups, Causes, and by online chat.

    Thanks!

  17. metaholic | February 21st, 2009 at 11:03 pm

    But what I do not understand is, although my friends who have installed it can spam me through the notification panel, why has the application been installed in my facebook?
    I immediately removed it, yet I do NOT recall installing it EVER.
    Was it a Name Trust Heist, from a previous application?

  18. Hallie | February 22nd, 2009 at 1:09 am

    Strange…I was a sucker enough to click on it (although I realized my error immediately after clicking) but it is *not* installed on my Facebook apps as far as I can tell (no app called “error” or such)…so I can’t remove it. Not sure what to do.

  19. @lun | February 22nd, 2009 at 1:16 am

    You can use this link to block the app:
    http://www.facebook.com/apps/block.php?id=66924747585&action=block&source=about

    Or you can do it by going to the app page and clicking “Block Application”:
    http://www.facebook.com/apps/application.php?id=66924747585

  20. rosedragon | February 22nd, 2009 at 1:21 am

    Thank you for the information. Apparently this application trying to ‘farming’ facebook user informations.

    Well heck, social sites never be a safe place anyway. How could you guarantee that good working applications doesn’t sell your information to spammers while anyone allowed to make apps?

  21. EVo | February 22nd, 2009 at 1:26 am

    Thanks for the heads up man.

    Just curious. Do malware / virus writers have a life?

  22. Facebook Error Check System | Makanine.com | February 22nd, 2009 at 1:34 am

    [...] the complete about Facebook Error Check System solutions read a great warning page about this Facebook malware, complete with screen shots. Hope you be careful about Error Check System on facebook, hope help [...]

  23. sarah | February 22nd, 2009 at 1:56 am

    I definitely did not add the app, and yet it was there in my app list this morning after I got the notification. How did that happen?

  24. Ed | February 22nd, 2009 at 2:25 am

    And they proudly boast FB is one of the safest platforms. Haha!

  25. Sed | February 22nd, 2009 at 3:31 am

    Why does some hacker motherf—–er have to spoil Facebook for everyone else? I’m sick of scum like these guys!

  26. shannon | February 22nd, 2009 at 3:44 am

    me bein me… (stupid) accepted.. and now have it on my facebook.. how the hell do i block it?? wat is it goin 2 do 2 my account?? :(
    x

  27. Chris | February 22nd, 2009 at 4:06 am

    Nice story mate, but could I suggest editing in how persistent this thing is?

    I too did not add this app and yet it was there on my profile. Seemingly just clicking on the notification link itself is enough.

  28. Facebook “Error Check System” Application Still Runs Rampant (Updated) | February 22nd, 2009 at 4:25 am

    [...] Before the application had a chance to get completely out of control, Facebook shut it down. Some users were suggesting that this application was “spyware” but there is nothing to suggest [...]

  29. Josh Lim | February 22nd, 2009 at 4:28 am

    Post updated to include removal instructions, as well as a note to beware another site masquerading as the cure to the spyware. That site itself, is spyware.

  30. sam hadley | February 22nd, 2009 at 8:18 am

    this is fake its spyware

  31. hX.Stassi | February 22nd, 2009 at 8:54 am

    Thanks for the article, Josh. I’ve notified the people who tried sending it to me and linked back to your site for info and removal instructions. Appreciate it.

  32. EVo | February 22nd, 2009 at 9:35 am

    Wuah 30th! i know..irrelevant but, saje lah :D

  33. Dude | February 22nd, 2009 at 10:43 am

    Um… guys, stop freaking out about this. A facebook application cannot be spyware because it doesn’t install anything on your system. All it is is a simple hack trying to see how many people they can get to add it. If you add it, don’t worry. Delete it so that it doesn’t also spam your friends, but don’t get your undies in a bundle. No biggie.

  34. niranjan | February 22nd, 2009 at 2:04 pm

    hai

  35. Hendras | February 22nd, 2009 at 2:36 pm

    thanks 4 your info, i’ll forward those info to all of my friend

  36. kat | February 22nd, 2009 at 4:37 pm

    the second last add on this page explained why my efforts were not successful in finding and deleting said application….its been removed….i was about to type in here that the links provided above did not work,took me to my news feed instead but alas facebook have come to rescue and deleted t, josh can you confirm this so some of us who were stupid enought to add it can sleep better tonight!?

  37. Josh.my's answers on Yedda - People. Sharing. Knowledge. | February 22nd, 2009 at 6:24 pm

    Yedda: RE: Facebook error check system…

    Josh.my answered: re:What is the Facebook errors message or error check system? Is it legitimate? Is it spyware? …

  38. Huzi | February 22nd, 2009 at 6:32 pm

    So basically now, Facebook itself shut the application down right ? so it’s not a threat anymore to those who actually clicked on it by mistake, right ?

    I was one of the dumb fools who clicked on it, that’s the reason am double checking :)

  39. rach | February 22nd, 2009 at 6:38 pm

    Hi, i added it yest, then today i get a request to join this group to say its fake, but i can’t find it in my apps to remove it, does this mean FB nave deleted it off my profile?

  40. @lun | February 22nd, 2009 at 8:53 pm

    Facebook appeared to have removed the app, however it has popped up again.

    It’s new url is here: http://www.facebook.com/apps/application.php?id=67653324277

    Just click “Block Application” like before.

  41. Rebecca | February 22nd, 2009 at 9:29 pm

    Thank you so much for taking the time to inform people. FB seems a little safer when there are watchdogs like you around :)

  42. embarrassing | February 22nd, 2009 at 10:58 pm

    I think i installed it then freaked and deleted it from the apps list straight away, but got and message from a friend telling me that it had already notified him even though i skipped the notify friends list.
    I feel all dirty and sullied.
    Off to sit in a shower for a few hours…..
    :|

  43. Bobby | February 22nd, 2009 at 11:00 pm

    Received the app invite yesterday and it seemed really dodgy with no application data and from people I don’t know! Ignored and blocked it.

    I got a link to your site from Twitter - social networking works best like this.

    Reported the app to Facebook now as well.

    Thanks for the full warning.

    Bobby

  44. Lids | February 23rd, 2009 at 12:20 am

    This popped up in my notifications today, so apparently it’s either resurfaced or Facebook hasn’t shut it down. Thankful for the heads up!

  45. JL | February 23rd, 2009 at 1:16 am

    Thanks for the info, luckily I tend to ignore apps. Will post this link on my FB.

  46. P. | February 23rd, 2009 at 2:25 am

    There is a new incarnation of this app - it looks and feels exactly the same, but has different application ID in facebook (I.E. someone just added the same app again).

  47. Kelly | February 23rd, 2009 at 2:28 am

    It sent it to all my friends, and one texted me telling me to remove it as she googled it. What would I do without her!

  48. holnrew | February 23rd, 2009 at 3:01 am

    It installs itself when you click on the find out more about it link too.

  49. Security Cadets » Facebook application called “Error Check System” being pushed | February 23rd, 2009 at 3:53 am

    [...] sure if anyone has picked up on this, but I was given a link to an interesting blog article here after a friend of mine experienced problems on Facebook with an application call “Error Check [...]

  50. Noam | February 23rd, 2009 at 5:01 am

    For the hebrew speakers - additional details right here: http://www.tapuz.co.il/blog/ViewEntry.asp?EntryId=1425116

Leave a Comment