Re: IM trojan

[WILLIAM I ARNOLD <WARNOLD () UT EDU>]

Has anyone seen this effecting macs or has it just been windows
machines.

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Dick Jacobson
Sent: Wednesday, July 21, 2010 6:53 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] IM trojan

We got hit today with a trojan that is spreading through IM.  It 
references a Facebook presence and contains an image.  When the message
is 
clicked on, the trojan spreads to that user's IM list and infects the 
machine.

The symptoms are not always consistent but most have gotten a pop-up
when 
the open a web browser which asks them to click to confirm they are a 
human and not a robot.

McAfee and MalwareBytes do not clean this; and we are rebuilding at
least 
2 machines because of this.

Anyone else seeing this and/or have a fix ??


-----------------------------------------------------------------------
     Dick Jacobson              e-mail : Dick.Jacobson () ndus edu
     NDUS IT Security Officer   office : STTC 219
                        phone  : 701-231-6280
-----------------------------------------------------------------------