************************************************************************
V I R U S R E P O R T
(by the Trend Micro US Virus Research Group)
************************************************************************
------------------------------------------------------------------------
Date: January 25, 2002
------------------------------------------------------------------------
To read an HTML version of this newsletter, go to:
http://www.antivirus.com/trendsetter/virus_report/
Issue Preview:
1. TREND MICRO UPDATES: Pattern File and Scan Engine Updates
2. A Mass-mailing VB Worm -- WORM_FRAGLED.A (Low Risk)
3. 10 Most Prevalent In-the-Wild Malware Surveyed by Trend Micro US
4. Scan Your Computer FREE!
NOTE: Long URLs may break into two lines in some mail readers.
Should this occur, please cut and paste the URL in your browser.
************************************************************************
1. TREND MICRO UPDATES: Pattern File and Scan Engine Updates
------------------------------------------------------------------------
PATTERN FILE: 207 http://www.antivirus.com/download/pattern.asp
SCAN ENGINE: 5.630 http://www.antivirus.com/download/engines/
2. A Mass-mailing VB Worm -- WORM_FRAGLED.A (Low Risk)
------------------------------------------------------------------------
WORM_FRAGLED.A is written in Visual Basic and propagates by collecting email
addresses from files with *.DBX, *.MBX, *.HTML, *.IDX, and *.VBS extensions. It
uses Microsoft Outlook’s MAPI calls to send itself by email and also uses mIRC
and Microsoft Messenger to spread. Upon execution, it drops a file "LED.EXE" in
the Windows directory. The worm also deletes all files in the "ZoneAlarm" folder,
if it exists, except those that are currently in use.
For additional information about WORM_FRAGLED.A, please visit the
Trend Micro Virus Information Center at:
http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=WORM_FRAGLED.A
Trend Micro considers WORM_FRAGLED.A to be a very low risk virus and detection
will be available in the next official pattern release, #208 on or before
January 29, 2002.
3. 10 Most Prevalent In-the-Wild Malware Surveyed by Trend Micro in the US
(week of: January 14 through January 20, 2002)
------------------------------------------------------------------------
1. WORM_BADTRANS.B
2. PE_MAGISTR.B
3. WORM_SIRCAM.A
4. PE_MAGISTR.A
5. JS_EXCEPTION.GEN
6. VBS_LOVELETTR.AS
7. PE_FUNLOVE.4099
8. WORM_HYBRIS.M
9. VBS_HAPTIME.A
10. PE_NIMDA.A
SPECIAL OFFER:
Webmasters, add free virus information updates to your Web site with our
Virus Info Feed. Simply copy and paste a small piece of code to give your
visitors a real-time top 10 list and the latest virus advisories.
Setup takes approximately 10 minutes and requires no server-side code on
your Web site. All content is updated automatically from Trend Micro's Web
site. http://www.antivirus.com/syndication/vinfo/default.asp?ref=nwsltr
4. Test Your Virus Knowledge & Scan Your Computer FREE!
------------------------------------------------------------------------
Do you think you know enough about viruses? Try our new HouseCall quiz as
you scan your computer FREE for viruses and other malicious code. At the end
of the quiz you will be eligible to purchase Trend Micro PC-cillin 2000 for
20% OFF!!
SCAN NOW at http://housecall.antivirus.com
************************************************************************
You are receiving this email from Trend Micro, because you have either
downloaded a Trend Micro product or have signed up for our "Weekly Virus
Report." If you would like to change the way you receive email from
Trend Micro, please make changes in your account page at
http://www.antivirus.com/subscriptions/default.asp?email=trendmicro_pattern@netzwerk-aktiv.com
To UNSUBSCRIBE go to:
http://www.antivirus.com/subscriptions/default.asp?format=unsubscribe
For questions regarding viruses, please contact the Virus Doctor at
Virus_Doctor@trendmicro.com.
For questions regarding products, please contact Tech Support at
support@trendmicro.com.
For questions, comments and suggestions about the Weekly Virus Report
please contact our editor at Newsletters@trendmicro.com.
************************************************************************
Received on Fri Jan 25 23:30:20 2002
This archive was generated by hypermail 2.1.8 : Mon 29 May 2006 - 05:33:31 CEST