Trend Micro Weekly Virus Report - April 5, 2002

********************************************************************
TREND MICRO WEEKLY VIRUS REPORT
    
(by TrendLabs Global Antivirus and Research Center)
********************************************************************
------------------------------------------------------------------------
Date: April 5, 2002
------------------------------------------------------------------------
To read an HTML version of this newsletter, go to:
http://www.antivirus.com/trendsetter/virus_report/

Issue Preview:

1. TREND MICRO UPDATES: Pattern File and Scan Engine Updates
2. The Story of MYLIFE - WORM_MYLIFE.C and WORM_MYLIFE.F (Low Risk)
3. 10 Most Prevalent In-the-Wild Malware Surveyed by Trend Micro
4. Trend Micro PC-cillin 2002 is Now Available

NOTE: Long URLs may break into two lines in some mail readers.
Should this occur, please cut and paste the URL in your browser.

************************************************************************

1. TREND MICRO UPDATES: Pattern File and Scan Engine Updates
------------------------------------------------------------------------
PATTERN FILE: 256 http://www.antivirus.com/download/pattern.asp
SCAN ENGINE: 6.150 http://www.antivirus.com/download/engines/

2. The Story of MYLIFE - WORM_MYLIFE.C and WORM_MYLIFE.F (Low Risk)
------------------------------------------------------------------------
Both WORM_MYLIFE.C and WORM_MYLIFE.F are destructive worms that arrive as attachments to email messages with the subject line "the list" or "The List."

WORM_MYLIFE.C arrives with the attachment "List.TXT.scr." During the 50-59th minute of every hour, it deletes all folders contained in drive C:\, and formats the fixed drives D:\, E:\, F:\, G:\, H:\, and I:\. It also displays a message box with the title "LoOoOoL" and the text "My Life.C."

WORM_MYLIFE.F arrives with the attachment "List480.TXT.scr" and deletes all files in the drive C:\, and format drives D:\, E:\, F:\, G:\, H:\, and I:\ if they exist on the infected systm.

WORM_MYLIFE.C is detected and cleaned by Trend Micro pattern file #253 and above. WORM_MYLIFE.F is detected and cleaned by Trend Micro pattern file #255 and above.

For additional information about WORM_MYLIFE.C and WORM_MYLIFE.F, please visit Trend Micro
at: http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=WORM_MYLIFE.C
and
http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=WORM_MYLIFE.F

3. 10 Most Prevalent In-the-Wild Malware Surveyed by Trend Micro US
(week of: March 25, 2002 to March 31, 2002)
------------------------------------------------------------------------
1. WORM_KLEZ.E
2. WORM_BADTRANS.B
3. PE_MAGISTR.B
4. PE_MAGISTR.A
5. WORM_SIRCAM.A
6. PE_NIMDA.A
7. JS_EXCEPTION.GEN
8. PE_NIMDA.A-O
9. WORM_BADTRANS.A
10. VBS_HAPTIME.A-1

4. Trend Micro PC-cillin 2002 - Antivirus, Anti-Hacker, & PDA Virus Protection
------------------------------------------------------------------------
Trend Micro is pleased to announce the release of PC-cillin 2002.
PC-cillin 2002 provides award-winning protection against macro viruses, Trojans,
and other malicious threats. An integrated personal firewall helps secure
desktop computers against illegal access, ping attacks, and even port scanning
for Internet-era protection. This complete antivirus strategy also includes
security for Palm, Pocket PC, and EPOC devices.

BUY NOW: $39.95
http://www.trendmicro.com/pcc2002_wvr

If you already own PC-cillin, you may purchase an upgrade to PC-cillin 2002 for
just $19.95 at:
http://www.antivirus.com/pc-cillin/products/upgrade.htm

************************************************************************
You are receiving this email from Trend Micro, because you have either
downloaded a Trend Micro product or have signed up for our "Weekly Virus
Report." If you would like to change the way you receive email from
Trend Micro, please make changes in your account page at
http://www.antivirus.com/subscriptions/default.asp?email=trendmicro_pattern@netzwerk-aktiv.com
 
To UNSUBSCRIBE go to:
http://www.antivirus.com/subscriptions/default.asp?format=unsubscribe
 
For questions regarding products, please contact Tech Support at
support@trendmicro.com.
 
For questions, comments and suggestions about the Weekly Virus Report
please contact our editor at Newsletters@trendmicro.com.
************************************************************************
Received on Sat Apr 6 03:30:14 2002