Re: New Malware?

On 20 Jul 2006, at 12:55, Bruce Martins wrote:

> I had a user who received an e-mail pretending to be from google  
> updates
> with a subject line of "New Google Toolbar Released"
>
> The link actually takes them to=20
>
> http://googletoolbar.com.sapo.pt
>
> None of the AV scanners picked this up when downloading the EXE,
> perimeter, nor desktop, and even with the latest definitions and scan
> engines.
>
> The file is called GoogleToolbarFirefox.exe
>
> I am assuming this is some sort of Trojan or exploit of firefox.
>
> Unfortunately the user ran the file as well, has anyone else out there
> seen this or know what this may be ? I have submitted the file for
> further testing.
>
> Bruce Martins
> Information Systems Manager
> EXTEND>>MEDIA
> 190 Liberty Street
> Toronto, Ontario
> Canada
> M6K 3L5
> _______________________
> e:[email protected]
> t: (416) 535-4222 ext. 2307
> f: (416) 535-1201
> http://www.extend.com
>
>
>

This just appeared on SANS.org they were referencing this link to  
theRegister http://www.theregister.com/2006/07/20/google_toolbar_trojan/

.myke