TREND MICRO WEEKLY VIRUS REPORT

*********************************************************************
TREND MICRO WEEKLY VIRUS REPORT
    
(by TrendLabs Global Antivirus and Research Center)
*********************************************************************
------------------------------------------------------------------------
Date: May 10, 2002
------------------------------------------------------------------------
To read an HTML version of this newsletter, go to:
http://www.antivirus.com/trendsetter/virus_report/

Issue Preview:

1. Trend Micro Updates - Pattern File and Scan Engine Updates
2. Snoopy Debuts in a Proof-of-Concept Virus - VBS_BIMORPH.A (Low Risk)
3. 10 Most Prevalent In-the-Wild Malware Surveyed by Trend Micro US
4. Trend Micro PC-cillin 2002 is Now Available

NOTE: Long URLs may break into two lines in some mail readers.
Should this occur, please cut and paste the URL in your browser.

************************************************************************

1. Trend Micro Updates - Pattern File and Scan Engine Updates
------------------------------------------------------------------------
PATTERN FILE: 275 http://www.antivirus.com/download/pattern.asp
SCAN ENGINE: 6.150 http://www.antivirus.com/download/engines/

2. Snoopy Debuts in a Proof-of-Concept Virus - VBS_BIMORPH.A (Low Risk)
------------------------------------------------------------------------
This two-in-one polymorphic Visual Basic Script (VBS) malware is a proof-of-concept virus that combines two different viruses to co-exist, and spread as a single malware. It uses Microsoft Outlook to send copies of itself via email with the subject line "Check this out" and two infected VBS attachments, "Snoopy shagging Woodstock" and "Snoopy smoking weed."

This virus also contains a text file attachment, PASS.ON, labeled as "potential password source." The text file is from an infected user's drive and may actually contain the passwords of the infected user.

This destructive virus parses all drives and directories of the infected system's fixed and removable drives. It overwrites itself to all files with a .TXT extension containing the text string "password", to a "C:\PASS.ON" file.
 
If you would like to scan your computer for VBS_BIMORPH.A or thousands of other worms, viruses, Trojans and malicious code, visit HouseCall, Trend Micro's free online virus scanner at: http://housecall.antivirus.com/

VBS_BIMORPH.A is detected and cleaned by Trend Micro pattern file #272 and above.

For additional information about VBS_BIMORPH.A, please visit Trend Micro
at: http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=VBS_BIMORPH.A

3. 10 Most Prevalent In-the-Wild Malware Surveyed by Trend Micro US
(week of: April 29, 2002 to May 5, 2002)
------------------------------------------------------------------------
1. WORM_KLEZ.H
2. WORM_KLEZ.G
3. WORM_KLEZ.E
4. PE_MAGISTR.B
5. PE_ELKERN.D
6. TROJ_SUA.A
7. PE_MAGISTR.A
8. WORM_BADTRANS.B
9. TROJ_KILLCMOS.M
10. JS_EXCEPTION.GEN

4. Trend Micro PC-cillin 2002 - Antivirus, Anti-Hacker, & PDA Virus Protection
------------------------------------------------------------------------
Trend Micro is pleased to announce the release of PC-cillin 2002.
PC-cillin 2002 provides award-winning protection against macro viruses, Trojans,
and other malicious threats. An integrated personal firewall helps secure
desktop computers against illegal access, ping attacks, and even port scanning
for Internet-era protection. This complete antivirus strategy also includes
security for Palm, Pocket PC, and EPOC devices.

BUY NOW: $39.95
http://www.trendmicro.com/pcc2002_wvr

If you already own PC-cillin, you may purchase an upgrade to PC-cillin 2002 for
just $19.95 at:
http://www.antivirus.com/pc-cillin/products/upgrade.htm

************************************************************************
You are receiving this email from Trend Micro, because you have either
downloaded a Trend Micro product or have signed up to receive the "Weekly Virus
Report." If you would like to change the way you receive email from
Trend Micro, please make changes in your account page at
http://www.antivirus.com/subscriptions/default.asp?email=trendmicro_pattern@netzwerk-aktiv.com
 
To UNSUBSCRIBE go to:
http://www.antivirus.com/subscriptions/default.asp?format=unsubscribe
 
For questions, comments, and suggestions about the Weekly Virus Report
please contact the Newsletters Editor at newsletters@trendmicro.com.
************************************************************************
Received on Sat May 11 05:00:22 2002