Trend Micro Weekly Virus Report -- March 22, 2002

************************************************************************
   T R E N D M I C R O W E E K L Y V I R U S R E P O R T
    
         (by TrendLabs, Global Antivirus and Research Center)
************************************************************************
------------------------------------------------------------------------
Date: March 22, 2002
------------------------------------------------------------------------
To read an HTML version of this newsletter, go to:
http://www.antivirus.com/trendsetter/virus_report/
 
Issue Preview:
 
1. TREND MICRO UPDATES: Pattern File and Scan Engine Updates
2. New and In-The-Wild--WORM_MYLIFE.B (Medium Risk)
3. 10 Most Prevalent In-the-Wild Malware Surveyed by Trend Micro US
4. Pretending to be Something Else--WORM_SHREW.A (Low Risk)
5. Trend Micro PC-cillin 2002 is NOW AVAILABLE!
 
NOTE: Long URLs may break into two lines in some mail readers.
Should this occur, please cut and paste the URL in your browser.
 
************************************************************************
 
1. TREND MICRO UPDATES: Pattern File and Scan Engine Updates
------------------------------------------------------------------------
PATTERN FILE: 248 http://www.antivirus.com/download/pattern.asp
SCAN ENGINE: 6.100 http://www.antivirus.com/download/engines/
 
2. New and In-The-Wild--WORM_MYLIFE.B (Medium Risk)
------------------------------------------------------------------------
WORM_MYLIFE.B is a UPX-compressed, mass-mailing worm that was created
in Visual Basic. IT uses Microsoft Outlook to email itself to all addresses
listed in the infected user's address book. The details of the email it
arrives with are as follows:

SUBJECT: bill caricature
MESSAGE BODY: Hiiiii
How are youuuuuuuu?
look to bill caricature it's vvvery verrrry ffffunny :-) :-)
i promise you will love it? ok
buy
========No Viruse Found========
MCAFEE.COM
----------------------------
----------------------------
ATTACHMENT: cari.scr

When the current system time is 8:xx AM, this worm deletes certain files
and directories.

For additional information about WORM_MYLIFE.B, please visit
the Trend Micro Virus Information Center at:
http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=WORM_MYLIFE.B

WORM_MYLIFE.B is detected and cleaned by Trend Micro pattern file #247
and above.
 
3. 10 Most Prevalent In-the-Wild Malware Surveyed by Trend Micro in the US
(week of: March 11 through March 17, 2002)
------------------------------------------------------------------------
1. PE_MAGISTR.B
2. WORM_KLEZ.E
3. PE_MAGISTR.A
4. WORM_BADTRANS.B
5. JS_EXCEPTION.GEN
6. PE_NIMDA.A-O
7. PE_NIMDA.A
8. PE_NIMDA.E
9. WORM_SIRCAM.A
10. WORM_GIBE.DAM

SPECIAL OFFER:
Webmasters, add free virus information updates to your Web site with our
Virus Info Feed. Simply copy and paste a small piece of code to give your
visitors a real-time top 10 list and the latest virus advisories.
Setup takes approximately 10 minutes and requires no server-side code on
your Web site. All content is updated automatically from Trend Micro's Web
site. http://www.antivirus.com/syndication/vinfo/default.asp?ref=nwsltr
 
4. Pretending to be Something Else--WORM_SHREW.A (Low Risk)
------------------------------------------------------------------------
WORM_SHREW.A is an Internet worm, created in Visual Basic that uses Microsoft
Outlook to propagate copies of itself via email to all recipients
listed in the infected user's Windows Address Book (WAB). The details of the
email that this worm arrives in are as follows:
 
SUBJECT:Try this, pretty cool
MESSAGE BODY: <None>
ATTACHMENT:ActiveM.exe; List.txt
 
The EXE file this worm arrives in is an Active Mouse program. Upon execution,
it prompts the target user for a registration number. Thereafter, if the target
user clicks the "Cancel" button on the message box, it displays another message
box with a warning.
 
For additional information about WORM_SHREW.A, please visit
the Trend Micro Virus Information Center at:
http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=WORM_SHREW.A

WORM_SHREW.A is detected and cleaned by Trend Micro pattern file #247 and above.

5. Trend Micro PC-cillin 2002: Antivirus, Anti-Hacker, & PDA Virus Protection
------------------------------------------------------------------------
Trend Micro is pleased to announce the release of PC-cillin 2002.
PC-cillin 2002 provides award-winning protection against macro viruses, Trojans,
and other malicious threats. An integrated personal firewall helps secure
desktop computers against illegal access, ping attacks, and even port scanning
for Internet-era protection. This complete antivirus strategy also includes
security for Palm, Pocket PC, and EPOC devices.
 
BUY NOW FOR $39.95 at:
http://www.trendmicro.com/pcc2002_wvr
 
If you already have PC-cillin, you may purchase an upgrade to PC-cillin 2002 for
just $19.95 at:
http://www.antivirus.com/pc-cillin/products/upgrade.htm
 
************************************************************************
You are receiving this email from Trend Micro, because you have either
downloaded a Trend Micro product or have signed up for our "Weekly Virus
Report." If you would like to change the way you receive email from
Trend Micro, please make changes in your account page at
http://www.antivirus.com/subscriptions/default.asp?email=trendmicro_pattern@netzwerk-aktiv.com
 
To UNSUBSCRIBE go to:
http://www.antivirus.com/subscriptions/default.asp?format=unsubscribe
 
For questions regarding viruses, please contact the Virus Doctor at
Virus_Doctor@trendmicro.com.
 
For questions regarding products, please contact Tech Support at
support@trendmicro.com.
 
For questions, comments and suggestions about the Weekly Virus Report
please contact our editor at Newsletters@trendmicro.com.
************************************************************************
Received on Sat Mar 23 01:02:36 2002