Trend Micro Virus Report - November 2001 #2

************************************************************************
V I R U S R E P O R T
    
(by the Trend Micro US Virus Research Group)
************************************************************************
------------------------------------------------------------------------
Date: November 9, 2001
------------------------------------------------------------------------

If you're a corporate user and want to assess your virus protection,
check out Trend Micro's Virus Risk Assessment Web site at:
http://www.antivirus.com/free_tools/edoctor/

Issue Preview:

1. TREND MICRO UPDATES: Pattern File and Scan Engine Updates
2. Seeking Sites - JS_SEEKER.W
3. 10 Most Prevalent In-the-Wild Malware Surveyed by Trend Micro US
4. Top 5 Viruses Trend Micro's US Customers are Most Concerned About
5. New Version of ScanMail for Exchange 2000 Available

NOTE: Long URLs may break into two lines in some mail readers.
Should this occur, please cut and paste the URL in your browser.

************************************************************************

1. TREND MICRO UPDATES: Pattern File and Scan Engine Updates
------------------------------------------------------------------------
PATTERN FILE: 165 or 965 http://www.antivirus.com/download/pattern.asp
SCAN ENGINE: 5.600 http://www.antivirus.com/download/engines/

2. Seeking Sites - JS_SEEKER.W (Low Risk)
------------------------------------------------------------------------
JS_SEEKER.W, a variant of JS_SEEKER.A, is an encrypted JavaScript Trojan that changes the infected system's Internet Explorer startup page.

Upon execution, this Java Script Trojan modifies a registry entry to change the Internet Explorer startup page of an infected system to a pornographic site. It has no destructive payload.

This virus is currently spreading in-the-wild, but has been classified as low risk. Trend Micro has received no reports of infection at this time.

For additional information about JS_SEEKER.W, please visit Trend Micro at:
http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=JS_SEEKER.W.

JS_SEEKER.W is detected by Trend Micro pattern file #160 or #960.

3. 10 Most Prevalent In-the-Wild Malware Surveyed by Trend Micro US
(week of: October 29, 2001 to November 4, 2001)
------------------------------------------------------------------------
1. PE_MAGISTR.DAM
2. VBS_HAPTIME.A
3. PE_MAGISTR.B
4. TROJ_SIRCAM.A
5. TROJ_BLKSTONE.A
6. PE_NIMDA.A-O
7. TROJ_NEWPIC.A
8. JS_KAKWORM.A
9. TROJ_HYBRIS.M
10. JS_NIMDA.A

SPECIAL OFFER:
Webmasters, add free virus information updates to your Web site with our
Virus Info Feed. Simply copy and paste a small piece of code to give your visitors a real-time top 10 list and the latest virus advisories.
Setup takes approximately 10 minutes and requires no server-side code on your Web site. All content is updated automatically from Trend Micro's Web site. http://www.antivirus.com/syndication/vinfo/default.asp?ref=nwsltr

4. Top 5 Viruses Trend Micro's US Customers are Most Concerned About
(where systems were not infected)
------------------------------------------------------------------------
1. PE_NIMDA.A
2. W97M_GENERIC
3. TROJ_MSINIT.A
4. TROJ_KLEZ.A
5. PE_MAGISTR.DAM

5. New Version of ScanMail for Exchange 2000 Available
------------------------------------------------------------------------
ScanMail for Microsoft Exchange 2000 Version 6.0 with ScanMail eManager version 5.0 plug-in provides comprehensive best-of-breed antivirus, content security, and proactive real-time protection during virus outbreaks. It offers a multi-threaded software architecture and remote Web-based management features. ScanMail for Microsoft Exchange 2000 v6.0 delivers optimal performance, scalability, and reliability. Download a FREE evaluation copy at http://www.antivirus.com/products/smex2000/

************************************************************************
You are receiving this email from Trend Micro, because you have either
downloaded a Trend Micro product or have signed up for our "Weekly Virus
Report." If you would like to change the way you receive email from
Trend Micro, please make changes in your account page at
http://www.antivirus.com/subscriptions/default.asp?email=trendmicro_pattern@netzwerk-aktiv.com
 
To UNSUBSCRIBE go to:
http://www.antivirus.com/subscriptions/default.asp?format=unsubscribe
 
For questions regarding viruses, please contact the Virus Doctor at
Virus_Doctor@trendmicro.com.
 
For questions regarding products, please contact Tech Support at
support@trendmicro.com.
 
For questions, comments and suggestions about the Weekly Virus Report
please contact our editor at Newsletters@trendmicro.com.
************************************************************************
Received on Sat Nov 10 04:45:19 2001