critical spyware web alert "imrworldwide.com"

[IÑAKI]

Hi frieds,

I've received an alert from my Web Gateway. This's about critical alert of spyware web incident, the spyware name is imrworldwide.com, and this malware is known by the name Malscript!html. I've read about this malware, and it isn't new, it's a malware discovered in 2008. In the same way, we'v our internal desktops with endpoint protection, and I haven't received any alert in Endpoint Protection console about this malware.

Has anyone received this warning and has information about it?

Thanks in advanced.

 

Iñaki

[Thomas K]

Is this being blocked by your Gateway? Maybe that is why SEP is not reporting this.

SEP detects this http://www.symantec.com/security_response/writeup.jsp?docid=2008-011517-3725-99

The latest definitions for this are dated 2/4/11. Are you running the Security Response recommended settings for SEP?

 

http://www.symantec.com/business/support/index?page=content&id=TECH122943&locale=en_US

 

[IÑAKI]

Thanks for your response.

 

The Web Gateway is blocking this access to internet, and these desktop have their antivirus endpoint updated, that's why i don't understand how web gateway send me this alert, and endpoint doesn't detect it. Perhaps be a false threat?