Trend Micro Weekly Virus Report - April 12, 2002

*********************************************************************
TREND MICRO WEEKLY VIRUS REPORT
    
(by TrendLabs Global Antivirus and Research Center)
*********************************************************************
------------------------------------------------------------------------
Date: April 12, 2002
------------------------------------------------------------------------
To read an HTML version of this newsletter, go to:
http://www.antivirus.com/trendsetter/virus_report/

Issue Preview:

1. TREND MICRO UPDATES: Pattern File and Scan Engine Updates
2. Beware of Support Messages - WORM_KELINO.A (Low Risk)
3. 10 Most Prevalent In-the-Wild Malware Surveyed by Trend Micro
4. Trend Micro PC-cillin 2002 is Now Available

NOTE: Long URLs may break into two lines in some mail readers.
Should this occur, please cut and paste the URL in your browser.

************************************************************************

1. TREND MICRO UPDATES: Pattern File and Scan Engine Updates
------------------------------------------------------------------------
PATTERN FILE: 259 http://www.antivirus.com/download/pattern.asp
SCAN ENGINE: 6.150 http://www.antivirus.com/download/engines/

2. Beware of Support Messages - WORM_KELINO.A (Low Risk)
------------------------------------------------------------------------
This Internet worm arrives as an attachment to an email. It claims to be a support message from Microsoft, and arrives with the following details:

FROM: "Microsoft Support" <support@microsoft.com>

SUBJECT: Support Message

MESSAGE BODY: During the last time, many bugs were found in our software. Because of our product philosophie, we want to give our custumers as much security as possible. So we decided to send out to all known Microsoft custumers the NetBios patch Version 1.0 . This patch will fix all the known and possibly unknown bugs and securityholes on port 137 and 139 . The patch is completly free and easy to install. Our patch will install itself after starting and run as background process. After a successfull installation you should get an OK message box. Thanx for using Microsoft products.

Your Microsoft Support Team

ATTACHMENT: "netbiospatch10.exe"

Upon execution, it sends a copy of itself to all email recipients listed in the infected user's Windows Address Book (WAB). It also sends an email containing information about the infected user's system to the worm author.
 
WORM_KELINO.A is detected and cleaned by Trend Micro pattern file #246 and above.

For additional information about WORM_KELINO.A, please visit Trend Micro
at: http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=WORM_KELINO.

3. 10 Most April 1, 2002 to April 7, 2002)
------------------------------------------------------------------------
1. WORM_KLEZ.E
2. WORM_BADTRANS.B
3. PE_MAGISTR.A
4. PE_MAGISTR.B
5. JS_EXCEPTION.GEN
6. WORM_YAHA.A
7. PE_NIMDA.A-O
8. PE_NIMDA.E
9. WORM_SIRCAM.A
10.WORM_CERVIVEC.A

4. Trend Micro PC-cillin 2002 - Antivirus, Anti-Hacker, & PDA Virus Protection
------------------------------------------------------------------------
Trend Micro is pleased to announce the release of PC-cillin 2002.
PC-cillin 2002 provides award-winning protection against macro viruses, Trojans,
and other malicious threats. An integrated personal firewall helps secure
desktop computers against illegal access, ping attacks, and even port scanning
for Internet-era protection. This complete antivirus strategy also includes
security for Palm, Pocket PC, and EPOC devices.

BUY NOW: $39.95
http://www.trendmicro.com/pcc2002_wvr

If you already own PC-cillin, you may purchase an upgrade to PC-cillin 2002 for
just $19.95 at:
http://www.antivirus.com/pc-cillin/products/upgrade.htm

************************************************************************
You are receiving this email from Trend Micro, because you have either
downloaded a Trend Micro product or have signed up for our "Weekly Virus
Report." If you would like to change the way you receive email from
Trend Micro, please make changes in your account page at
http://www.antivirus.com/subscriptions/default.asp?email=trendmicro_pattern@netzwerk-aktiv.com
 
To UNSUBSCRIBE go to:
http://www.antivirus.com/subscriptions/default.asp?format=unsubscribe
 
For questions regarding products, please contact Tech Support at
support@trendmicro.com.
 
For questions, comments and suggestions about the Weekly Virus Report
please contact our editor at Newsletters@trendmicro.com.
************************************************************************
Received on Sat Apr 13 01:00:20 2002