When installed, Trojan:JS/Febipos.E tries to read a configuration file from remote server supbr.info/sqlvarbr.php.
The configuration file contains a list of commands for the trojan to do in a logged on Facebook account. This includes instructions to:
Like a page
Join a group
Invite friends to a group
Chat to friends
Comment on a post
Posts Facebook messages
We have seen Trojan:JS/Febipos.E post the following messages in Portuguese on the wall of a logged in Facebook account. It can also tag several of your friends:
Encontrei um vÃdeo no Youtube ensinando a ganhar $$ na Internet pelo Google! Acho que vale a pena I found a video on Youtube teaching how to earn $$ on the internet through Google! I think it’s worth it.