Educause Security Discussion mailing list archives
Re: IM trojan
From: RL Vaughn <RL_Vaughn () BAYLOR EDU>
Date: Wed, 21 Jul 2010 18:25:11 -0500
Dick Jacobson wrote:
We got hit today with a trojan that is spreading through IM. It references a Facebook presence and contains an image. When the message is clicked on, the trojan spreads to that user's IM list and infects the machine.The symptoms are not always consistent but most have gotten a pop-up when the open a web browser which asks them to click to confirm they are a human and not a robot.McAfee and MalwareBytes do not clean this; and we are rebuilding at least 2 machines because of this.Anyone else seeing this and/or have a fix ?? ----------------------------------------------------------------------- Dick Jacobson e-mail : Dick.Jacobson () ndus edu NDUS IT Security Officer office : STTC 219 phone : 701-231-6280 -----------------------------------------------------------------------
Hi Dick,Let me know if you need an appropriate Facebook contact. Do you have a binary or md5 thereof?
Randy
Current thread:
- IM trojan Dick Jacobson (Jul 21)
- Re: IM trojan RL Vaughn (Jul 21)
- Re: IM trojan Brewer, Alex D (Jul 22)
- Re: IM trojan Brian Grime (Jul 22)
- Re: IM trojan Brewer, Alex D (Jul 22)
- Re: IM trojan WILLIAM I ARNOLD (Jul 22)
- Re: IM Trojan Brewer, Alex D (Jul 22)
- Re: IM trojan Jesse Thompson (Jul 22)
- Re: IM trojan Matthew Gracie (Jul 22)
- Re: IM trojan Jesse Thompson (Jul 22)
- Re: IM trojan Matthew Gracie (Jul 22)
- Re: IM trojan RL Vaughn (Jul 21)