rocknbil - 12:36 am on Jul 8, 2010 (gmt 0)

I couldn't find anything either, but found most explanations leading to phishing or the data breaches way back (which IS a possibility, she hadn't changed her pw in quite some time.) Grisoft AVG which has Koobface in it's definitions (checked,) hard wired 256 K DSL, also did a spybot and AdAware cleanse for good measure, what I'd call a "low risk" user, uses it only for working operations and no major security passes through it.

I guess if I found out how they do this kind of hack other than the obvious, I could figure out how to prevent it.