Desden Bombing Worm? 1

[dBjason]

We just got hit with the above, the subject line states "regretting the bombing is Desden", and it seems to go through our Notes directories e-mailing everyone with a

http://www link.

Is anyone else experiencing this?


I'm trying to find out more information about this worm but do not know where to go (no internet resources are quite available yet).

 

[qtin]

http://forums.mcafeehelp.com/viewtopic.php?t=47417

The result of Sober.U (trend-micro), Sober.q@mm (McAfee)

Not much info but at least it gets you a starting point.

Q-

 

[dBjason]

Hey thanks. That's alot more than I've had!

 

[JFBouchard]

Valuable post qtin, a star for you...

Jeff

Hope this helps. Please let me know if this resolve your issue

Jeff

 

[jimbuddy]

has anyone ran across this trojan mtrslib3[1].js my norton detected it and a search on the web didn't give too much info.although I did get rid of it.

 

[BadBigBen]

@jimbuddy - it is ADWARE in a Java package... and it seems that it is more or less located in the Asian area... but yes, there is very little info on the beast...



Ben

If it works don't fix it! If it doesn't use a sledgehammer...