Educause Security Discussion mailing list archives

IM trojan


From: Dick Jacobson <Dick.Jacobson () NDUS EDU>
Date: Wed, 21 Jul 2010 17:52:49 -0500

We got hit today with a trojan that is spreading through IM. It references a Facebook presence and contains an image. When the message is clicked on, the trojan spreads to that user's IM list and infects the machine.

The symptoms are not always consistent but most have gotten a pop-up when the open a web browser which asks them to click to confirm they are a human and not a robot.

McAfee and MalwareBytes do not clean this; and we are rebuilding at least 2 machines because of this.

Anyone else seeing this and/or have a fix ??


-----------------------------------------------------------------------
    Dick Jacobson               e-mail : Dick.Jacobson () ndus edu
    NDUS IT Security Officer    office : STTC 219
                        phone  : 701-231-6280
-----------------------------------------------------------------------


Current thread: