Steve again

After researching the link that pops up in the new window, the link itself seems to be directly related to Facebook only, specifically to adding a fake farmville cheat link to my page. The link itself is actually the text of the post it makes when you edit out some of the characters. I've provided the link below:

• • WARNING! ** DO NOT CLICK THIS LINK! **

Moderator edit: Removed spam...again -MJB

I hope this helps.

how can i prevent or stop it?

Well, it seems to be limited to posting comments on Facebook looking like they're made by me. It basically opens a new window I have to close, and if I close Facebook after that, it doesn't get a chance to post it.

It's annoying as you can imagine, and I'd like to get rid of this pop-up. Preventing it from happening... well... that's not so hard. Just have to be careful when FF updates my add-on's in all.

The Same exact thing is happening to me as with Steve.

If anyone can figure out exactly what is going on, that would be greatly appreciated! What needs to be removed?

What I've done as a temporary fix is to block the "Share" app because when the spam status is posted, it's always says that it was sent "via Share". I clicked on that and then hit "block this application." It's only a temporary fix because a new window still opens (when I first get on facebook, and every 20-30 minutes after I'm on), though it can no longer change my status. I'd still like to get rid of whatever is causing those windows to pop up. Thanks again!

The problem is still happens -- about 2-3 minutes after I go onto Facebook, the link will pop up in a new window. Thankfully my status is protected since I blocked the Share app, but what's launching the link?

same issue here, except it also happens in chrome. malwarebytes, spybot, avg don't find anything...help!!!

in my chrome history the page title is 123456789

the url is http://krepi.net/trash//redirect.php?m= (then whatever they were trying to post as me).

when the window popped up, it actually crashed chrome but successfully posted in ff.

Not that anyone will like this, but it is a Facebook problem.

I took ALL my information off Facebook several weeks ago after doing some additional research on their 'income'. Remember when you signed up and they Promised that they did not share your information - well that is CRAP. Where does their $2 BILLION dollar revenue stream come from?

The redirect pop up you are getting is trying to hijack you to a Known Phishing site that Facebook 'sold' the rights to exploit their users. I am not saying that Facebook knew or knows they are Phishing, but that is the end result.

Want to correct the situation? Disable your Facebook account as over 3 million users have since the Income Scandal was exposed about a month ago - And stay the heck away from it!

Just my .02 worth.

ya i have the same problem. i use google crome. and its only on facebook as well. one time i noticed a

500 internal server error

on my pop up but i dont really know what that is.

i think i got in while recently downloading a video game that had a virus. i tried system restoring but it did not work. currently i am trying to uninstall and reinstall google crome, but i changed my password on facebook and so far no reposts, but its only been 1 day. i will keep researching till i find a solution because this is annoying

I have the same problem, and what I did was downloaded this.

https://addons.mozilla.org/en-US/firefox/addon/3145/

Then I added Krepi.net to the blacklist. The pop up will still come up, but the add-on will inform you it is blacklisted and will not let it load, thus not leaving an annoying facebook status.

To the previous poster, I've done what you've done too (reinstalling, changing password...) and the popup still appeared again for me and my guess is that it will for you too in a little while longer.

If you do find some answers from your research please do keep us updated here. Thanks!

I have the exact same problem as the users above! While using Mozilla, the Facebook status of everyone using my PC is changed to "Finaly I changed the plain and boring white and blue Facebook colors to something a little more expressive! Ahhh that looks much much better! Try out ^removed spam -MJB^ (DONT VISIT THE WEBSITE!) and a very fast popup page with this adress also appears and dissapears "hxxp://krepi.net/trash//redirect.php?m=just%20discovered%20a%20super%20fun%20tool%20that%20allows%20you%20to%20change%20your%20Facebook%20design..%20it%27s%20sooo%20fun%20:D%20Here%20it%20is%20http://bit.ly/pag3rag3" I have temporarily used the Mozilla addon to block the activity of this website, but the popup still appears... I have scanned my PC with everything; Kaspersky; Trojan Remover; Ad-Aware; Malwarebytes, (and actually removed some Trojans and Malware); after, changed my passwords, etc but this still persists... I have left this problem and my "dds" logs on Tech Support Forum, but have no had any answer... I hope someone out there can find the solution for us... If I get any helpful information, I will post over here. Thank you for the time spent reading this.

Hey guys, I think I got the solution for cleaning whatever is causing this. So I have been researching and all of the sudden I came across this website in some forgein language I didn´t understand, all I know is that they where talking about this "hxxp://krepi.net" (DONT ENTER THAT SITE) and about Spyware and a tool called SUPERAntiSpyware... so I thought "What the hell, I wont lose anything if I try it" So I downloaded SUPERAntiSpyware Free Edition from www.superantispyware.com/ , Ran it and removed a series of files like: Trojan.Agent/Gen-Redirector; Adware.Tracking Cookie; Adware.Flash Tracking Cookie, etc. Some hours have passed and I havent seen any popus coming up... I wont guarentee it´s not they´re site thats down, but at least try it... Over and out.

I was having the same problem, and kept looking around for solutions. Just tried David's suggestion and so far it's lookin good! Thanks.

Thanks to David, I've finally gotten rid of that popup. I was a pretty suspicious at first about downloading some strange antivirus software, especially if it has the word "super" in it. The more hyped up something sounds, the fishier it appears right? But I got so annoyed at the krepi popup, that I gave it a try. And it actually worked! Be sure to download from a reputable site.

Yep, just confirmed it. Superantispyware fixed the Facebook problem! Rock on!

OMG THANK YOU DAVID4!!!! I've been trying to get rid of this"virus" for the last 2 weeks and I've tried dozens of free anti-spy/malware programs and the one you suggested was the ONLY one that got rid of the problem that I and a lot of the people in this thread had!

Everyone with this problem, download the program in "David4"s post and it'll fix it

thanks again man!

^^^OOPS...got the guys name confused with the guy who responded afterwards (sorry I was so excited I got rid of the virus)

the link in "DAVID"s post works!!!

OP here. I was a bit skeptical of the "super" antispyware as well, so I waited to see what someone braver than me had to say. Needless to say, I used this yesterday and haven't had any problems since.

Thanks again David, this problem is officially solved!

I´m glad you got it fixed dudes, always a pleasure to help.

OK now, the anti-spyware and antivirus ware and all of that happy horse$#!t removed the root cause but leaves a little something-something behind that allows it to hijack and continue to mess with you. I found THE REST of the problem:

1. go to the browser and type: about:config (hit enter)

2. heed the warnings but go in anyway 3. find the keyword.url line. 4. right click the end of it and select reset.

   If you were like me you saw that all too familiar zugo and Bing on that line.

 Ha, victory is ours!