The virus is spread by email. The user receives a message claiming that Facebook must reset the user’s password. Message urges the user to open an attachment to set the new password.
Obviously that is a scam. To choose a new password you are prompted to type also the old one. The old one will be caught by the virus and sent the author together with the username.
Opening the attachment brings other problems. In addition to the program that steals passwords, other malware codes are downloaded. Rumors say that, by this time, have been sent tens of millions of emails in Europe, North America and Asia.
The golden Rule in this attack is to not open attachments. In addition, you can see it’s a false message after the tone it is use.