Wednesday, September 21, 2005

Geting pop-ups and other odd behavior? From SANS - Internet Storm Center

"If your users are accessing the european versions of the more popular search engines, chances are you have come across a file named 's_ta_ts.js' recently. The file contains about 2000 bytes of triple-encoded JavaScript, recognized by virus vendors variably as 'JS_WONKA.A' or 'Java/Dldr.Movie.A'."

No comments:

Post a Comment