Re: IM trojan

[RL Vaughn <RL_Vaughn () BAYLOR EDU>]

Dick Jacobson wrote:
> We got hit today with a trojan that is spreading through IM.  It 
> references a Facebook presence and contains an image.  When the message is 
> clicked on, the trojan spreads to that user's IM list and infects the 
> machine.
>
> The symptoms are not always consistent but most have gotten a pop-up when 
> the open a web browser which asks them to click to confirm they are a 
> human and not a robot.
>
> McAfee and MalwareBytes do not clean this; and we are rebuilding at least 
> 2 machines because of this.
>
> Anyone else seeing this and/or have a fix ??
>
>
> -----------------------------------------------------------------------
>      Dick Jacobson              e-mail : Dick.Jacobson () ndus edu
>      NDUS IT Security Officer   office : STTC 219
>                         phone  : 701-231-6280
> -----------------------------------------------------------------------
Hi Dick,

Let me know if you need an appropriate Facebook contact.  Do you have a 
binary or md5 thereof?


Randy