Trend Virus Report - April 2001 Issue # 2

************************************************************************
V I R U S R E P O R T
    
(by the Trend Micro US Virus Research Group)
************************************************************************
------------------------------------------------------------------------
Date: 04.13.2001 Issue Number: 04/02
------------------------------------------------------------------------
    
To read an HTML version of this newsletter, go to:
http://www.antivirus.com/trendsetter/virus_report/
  
If you're a corporate user and want to assess your virus protection,
check out Trend's Virus Risk Assessment Web site at:
http://www.antivirus.com/free_tools/edoctor/
    
Issue Preview:
    
1. TREND UPDATES: Pattern File and Scan Engine Update
2. Internet Worm In-the-Wild -- TROJ_BADTRANS.A
3. 10 Most Prevalent In-the-Wild Malware Surveyed by Trend US
4. Top 10 Viruses Trend US Customers are Most Concerned About
5. Antivirus for your Exchange Server from Trend
  
NOTE: Long URLs may break into two lines in some mail readers.
Cut and paste, should this occur.
  
************************************************************************
    
1. TREND UPDATES: Scan Engine and Pattern File Updates
------------------------------------------------------------------------
PATTERN FILE: 877 http://www.antivirus.com/download/pattern.asp
SCAN ENGINE: 5.300 http://www.antivirus.com/download/engines/
  
2. Internet Worm In-the-Wild -- TROJ_BADTRANS.A
------------------------------------------------------------------------
TROJ_BADTRANS.A is a memory-resident, Internet worm that propagates via email
clients that use Windows sockets such as Microsoft Outlook and Outlook Express.
Upon execution, it replies to all unread email messages with itself attached
to the email. The email sent by the worm has the same subject header and message
body as the original email. The name of the sender will be the name of the user
who is currently logged on to the infected computer. The worm also modifies
WIN.INI so that it is executed at the next re-boot.
 
For additional information about TROJ_BADTRANS.A please refer to our Web site at:
http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=TROJ_BADTRANS.A
 
TROJ_BADTRANS.A is detected with Trend pattern #877 and above.
 
3. 10 Most Prevalent In-The-Wild Malware Surveyed by Trend US
(week of: 04/02/2001 to 04/08/2001)
------------------------------------------------------------------------
1. VBS_KAKWORM.A
2. TROJ_MTX.A
3. TROJ_HYBRIS.B
4. PE_MAGISTR.A
5. TROJ_BYMER
6. TROJ_MTX.A.DLL
7. JS_SEEKER.E
8. JOKE_FLIPPED
9. TROJ_BLEBLA.B
10. PE_MTX.A
 
SPECIAL OFFER:
Webmasters, add free virus information updates to your Web site with our
Virus Info Feed. Simply copy and paste a small piece of code to give your
visitors a real-time top 10 list and the latest virus advisories.
Setup takes about 10 minutes and requires no server-side code on your
Web site. All content is updated automatically from Trend Micro's Web site.
http://www.antivirus.com/syndication/vinfo/default.asp?ref=nwsltr
  
4. Top 10 Viruses Trend US Customers are Most Concerned About
   (where systems were not infected)
------------------------------------------------------------------------
1. TROJ_MTX.A
2. TROJ_HYBRIS.B
3. VBS_KAKWORM.A
4. TROJ_HYBRIS.DLL
5. TROJ_HYBRIS.A
6. TROJ_SKA.WSOCK32
7. PE_MTX.A
8. TROJ_MTX.A.DLL
9. TROJ_HYBRIS_P30
10. TROJ_HYBRIS_P23
 
5. IS YOUR EXCHANGE SERVER PROTECTED FROM VIRUSES?
------------------------------------------------------------------------
If you don't have Trend Micro ScanMail for Exchange, it is not. ScanMail provides
you with the best antivirus solution for Exchange Servers. ScanMail won the
"Best Tool or Utility" award at MEC 2000. Download a 30-day trial copy NOW
http://www.antivirus.com/banners/tracking.asp?si=63&bi=207&ul=/products/smex

************************************************************************
You are receiving this email from Trend Micro, because you have either
downloaded a Trend Micro product or have signed up for our "Weekly Virus
Report." If you would like to change the way you receive email from
Trend Micro, please make changes in your account page at
http://www.antivirus.com/subscriptions/default.asp?email=trendmicro_pattern@netzwerk-aktiv.com
 
To UNSUBSCRIBE go to:
http://www.antivirus.com/subscriptions/default.asp?format=unsubscribe
 
For questions regarding viruses, please contact the Virus Doctor at
Virus_Doctor@trendmicro.com.
 
For questions regarding products, please contact Tech Support at
support@trendmicro.com.
 
For questions, comments and suggestions about the Weekly Virus Report
please contact our editor at Newsletters@trendmicro.com.
************************************************************************
Received on Fri, 13 Apr 2001 13:31:21 -0700