Trend Micro Virus Report -- August 2001 Issue # 2

************************************************************************
V I R U S R E P O R T
    
(by the Trend Micro US Virus Research Group)
************************************************************************
------------------------------------------------------------------------
Date: August 10, 2001 Issue Number: 08/02
------------------------------------------------------------------------
 
To read an HTML version of this newsletter, go to:
http://www.antivirus.com/trendsetter/virus_report/
 
If you're a corporate user and want to assess your virus protection,
check out Trend Micro's Virus Risk Assessment Web site at:
http://www.antivirus.com/free_tools/edoctor/
 
Issue Preview:
 
1. TREND MICRO UPDATES: Pattern File and Scan Engine Updates
2. Not so Peachy -- VBS_PEACHYPDF.A
3. 10 Most Prevalent In-the-Wild Malware Surveyed by Trend Micro US
4. Top Viruses Trend Micro's US Customers are Most Concerned About
5. Test Your Virus Knowledge & Scan Your Computer FREE!
 
NOTE: Long URLs may break into two lines in some mail readers.
Should this occur, please cut and paste the URL in your browser.
 
************************************************************************
 
1. TREND MICRO UPDATES: Pattern File and Scan Engine Updates
------------------------------------------------------------------------
PATTERN FILE: 923 http://www.antivirus.com/download/pattern.asp
SCAN ENGINE: 5.450 http://www.antivirus.com/download/engines/
 
PRODUCT UPDATE
Trend Micro ScanMail for Microsoft Exchange v.3.02 will no longer be available
for download after August 10, 2001. To focus our Support and Development
resources on new and improved antivirus solutions for Microsoft Exchange, we
will no longer provide technical support for ScanMail v.3.02 after
December 15, 2001. Upgrade versions of ScanMail for Exchange 5.5 and Exchange
2000 are available at http://www.antivirus.com/download.
 
2. Not so Peachy -- VBS_PEACHYPDF.A
------------------------------------------------------------------------
VBS_PEACHYPDF.A is a proof of concept worm that propagates via Microsoft
Outlook. It arrives in an email as a PDF file attachment with an embedded
Visual Basic Script. If the PDF file is opened and the computer has Adobe
Acrobat installed, the embedded VB Script is executed. From the infected
computer, the worm sends email with itself as a PDF attachment to no more
than 100 recipients in the BCC: (blind carbon copy) field.
 
The subject, message body, and file attachment name vary. An example of the
email that this worm may come in as follows:
 
Subject: Fw: Find the peach
Body: Try Finding the peach =)
Attachment: FIND THE PEACH.PDF
 
To execute, the embedded Visual Basic Script worm requires the full version of
Adobe Acrobat to be installed in the computer. Computers that only have Adobe
Reader installed are not affected by this worm. VBS_PEACHYPDF.A is a low risk
virus and has not been reported by any user.
 
For more information about VBS_PEACHYPDF.A , visit Trend Micro at:
http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=VBS_PEACHYPDF.A
 
VBS_PEACHYPDF.A will be detected by Trend Micro pattern file #924 to be released
next week
 
3. 10 Most Prevalent In-The-Wild Malware Surveyed by Trend Micro US
(week of: July 30, 2001 to August 5, 2001)
------------------------------------------------------------------------
1. TROJ_SIRCAM.A
2. VBS_HAPTIME.A
3. JS_KAKWORM.A
4. TROJ_HYBRIS.M
5. PE_MAGISTR.A
6. TROJ_BADTRANS.A
7. TROJ_MTX.A
8. TROJ_CHOKE
9. TROJ_FLOODBOTS20
10. JOKE_SCROLL.A
 
SPECIAL OFFER:
Webmasters, add free virus information updates to your Web site with our Virus
Info Feed. Simply copy and paste a small piece of code to give your visitors a
real-time top 10 list and the latest virus advisories. Setup takes approximately
10 minutes and requires no server-side code on your Web site. All content is
updated automatically from Trend Micro's Web site. http://www.antivirus.com/syndication/vinfo/default.asp?ref=nwsltr
 
4. Top Viruses Trend Micro's US Customers are Most Concerned About
(where systems were not infected)
------------------------------------------------------------------------
1. TROJ_SIRCAM.A
2. PE_MAGISTR.A
 
5. Test Your Virus Knowledge & Scan Your Computer FREE!
------------------------------------------------------------------------
Do you think you know enough about viruses? Try our new HouseCall quiz as
you scan your computer FREE for viruses and other malicious code. At the end
of the quiz you may be lucky to get Trend Micro PC-cillin 2000 for 10%, 15%, or
20% OFF!!
 
SCAN NOW: http://www.antivirus.com/banners/tracking.asp?si=63&bi=77&ul=http://housecall.antivirus.com

************************************************************************
You are receiving this email from Trend Micro, because you have either
downloaded a Trend Micro product or have signed up for our "Weekly Virus
Report." If you would like to change the way you receive email from
Trend Micro, please make changes in your account page at
http://www.antivirus.com/subscriptions/default.asp?email=trendmicro_pattern@netzwerk-aktiv.com
 
To UNSUBSCRIBE go to:
http://www.antivirus.com/subscriptions/default.asp?format=unsubscribe
 
For questions regarding viruses, please contact the Virus Doctor at
Virus_Doctor@trendmicro.com.
 
For questions regarding products, please contact Tech Support at
support@trendmicro.com.
 
For questions, comments and suggestions about the Weekly Virus Report
please contact our editor at Newsletters@trendmicro.com.
************************************************************************
Received on Fri, 10 Aug 2001 13:57:01 -0700