Trend Virus Report - March 2001 Issue # 4

V I R U S R E P O R T
    
(by the Trend Micro US Virus Research Group)
************************************************************************
------------------------------------------------------------------------
Date: 03.23.2001 Issue Number: 03/04
------------------------------------------------------------------------
    
To read an HTML version of this newsletter, go to:
http://www.antivirus.com/trendsetter/virus_report/
  
If you're a corporate user and want to assess your virus protection,
check out Trend's Virus Risk Assessment Web site at:
http://www.antivirus.com/free_tools/edoctor/
    
Issue Preview:
    
1. TREND UPDATES: Pattern File and Scan Engine Update
2. Talking About Injustice -- VBS_STAPLE.A
3. 10 Most Prevalent In-the-Wild Malware Surveyed by Trend US
4. Top 10 Viruses Trend US Customers are Most Concerned About
5. Trend Antivirus for Microsoft Exchange
  
NOTE: Long URLs may break into two lines in some mail readers.
Cut and paste, should this occur.
  
************************************************************************
    
1. TREND UPDATES: Scan Engine and Pattern File Updates
------------------------------------------------------------------------
PATTERN FILE: 866 http://www.antivirus.com/download/pattern.asp
SCAN ENGINE: 5.300 http://www.antivirus.com/download/engines/
  
2. Talking About Injustice -- VBS_STAPLE.A
------------------------------------------------------------------------
VBS_STAPLE.A, is a Visual Basic Script virus that, upon execution, displays a
message box and then sends itself out via email to the first 50 recipients
listed in the address book of the infected user. A sample of the email is
as follows:
Subject: RE:Injustice
Message Body:
Dear <Outlook Username>,
Did you send the attached message, I was not expecting this from you!
Attachment: injustice.txt.vbs
 
After sending the email, the virus updates a value in the registry to ensure that a particular recipient receives the email with the virus only once. The virus also sends the above mentioned email to several specified email addresses and tries to access certain Web sites.
 
For additional information about VBS_STAPLE.A please refer to our Web site at:
http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=VBS_STAPLE.A
 
VBS_STAPLE.A is detected with Trend pattern #864 and above.
 
3. 10 Most Prevalent In-The-Wild Malware Surveyed by Trend US
(week of: 03/12/2001 to 03/18/2001)
------------------------------------------------------------------------
1. TROJ_MTX.A
2. VBS_KAKWORM.A
3. TROJ_HYBRIS.B
4. JS_SEEKER.E
5. PE_MTX.A
6. TROJ_HYBRIS.A
7. TROJ_SUB7.BONUS
8. TROJ_BYMER
9. TROJ_QAZ.A
10. TROJ_HYBRIS.DLL
 
Trend Micro also offers the first real-time World Virus Tracking Center,
which shows the regional distribution of viruses worldwide during the
past 24 hours, past 7 days, and past 30 days. The World Virus Tracking
Center can be accessed at: http://wtc.trendmicro.com/wtc/
  
4. Top 10 Viruses Trend US Customers are Most Concerned About
   (where systems were not infected)
------------------------------------------------------------------------
1. TROJ_MTX.A
2. TROJ_HYBRIS.A
3. VBS_KAKWORM.A
4. TROJ_BYMER
5. TROJ_SHOCKWAVE.A
6. TROJ_SKA.WSOCK32
7. JAVA_BOHTTPD.2
8. TROJ_APS.216576
9. TROJ_HYBRIS.B
10. TROJ_PSYCHWARD.C
 
5. IS YOUR EXCHANGE SERVER VULNERABLE TO VIRUSES?
------------------------------------------------------------------------
If you don't have Trend ScanMail for Exchange, your Exchange Server is vulnerable. ScanMail provides you with the best antivirus solution for Exchange Servers and if you don't believe us, ask Microsoft. ScanMail won the "Best Tool or Utility" award at MEC 2000. Download a FREE 30-day trial copy of ScanMail for Exchange and see for yourself why it is the best.
DOWNLOAD NOW AT
http://www.antivirus.com/banners/tracking.asp?si=63&bi=25&ul=/products/smex

************************************************************************
You are receiving this email from Trend Micro, because you have either
downloaded a Trend product or have signed up for our "Weekly Virus
Report." If you would like to change the way you receive email from
Trend, please make changes in your account page at
http://www.antivirus.com/subscriptions/default.asp?email=trendmicro_pattern@netzwerk-aktiv.com
 
To UNSUBSCRIBE go to:
http://www.antivirus.com/subscriptions/default.asp?format=unsubscribe
 
For questions regarding viruses, please contact the Virus Doctor at
Virus_Doctor@trendmicro.com.
 
For questions regarding products, please contact Tech Support at
support@trendmicro.com.
 
For questions, comments and suggestions about the Weekly Virus Report
please contact our editor at Newsletters@trendmicro.com.
************************************************************************
Received on Fri, 23 Mar 2001 13:14:28 -0800