Trend Micro Weekly Virus Report - June 7, 2002

From: Trend Micro Virus Info <VirusInfo_at_trendmicro-newsletters.com>
Date: Sat 08 Jun 2002 - 05:04:44 CEST
Message-ID: <0eb494504030862BLACKBOX4@blackbox4>

*********************************************************************
TREND MICRO WEEKLY VIRUS REPORT
    
(by TrendLabs Global Antivirus and Research Center)
*********************************************************************
------------------------------------------------------------------------
Date: June 7, 2002
------------------------------------------------------------------------
To read an HTML version of this newsletter, go to:
http://www.antivirus.com/trendsetter/virus_report/

Issue Preview:

1. Trend Micro Updates - Pattern File and Scan Engine Updates
2. Shakira Makes Her Debut - VBS_VBSWG.AQ (Medium Risk)
3. 10 Most Prevalent In-the-Wild Malware Surveyed by Trend Micro US
4. Trend Micro PC-cillin 2002 Now Available

NOTE: Long URLs may break into two lines in some mail readers.
Should this occur, please cut and paste the URL in your browser.

************************************************************************

1. Trend Micro Updates - Pattern File and Scan Engine Updates
------------------------------------------------------------------------
PATTERN FILE: 295 http://www.antivirus.com/download/pattern.asp
SCAN ENGINE: 6.150 http://www.antivirus.com/download/engines/

2. Shakira Makes Her Debut - VBS_VBSWG.AQ (Medium Risk)
------------------------------------------------------------------------
On June 6, 2002 the risk level of VBS_VBSWG.AQ was upgraded from low risk to medium risk, due to an increase in this worm's activity.

This destructive Visual Basic Script (VBScript) worm propagates using Microsoft Outlook, and arrives in an email with the following:

Subject: Shakira's Pictures

Message Body: Hi :
i have sent the photos via attachment
have funn...

Attachment: ShakiraPics.jpg.vbs

Upon execution, it drops a file, SHAKIRAPICS.JPG.VBS, in the Windows directory and then adds a registry entry that allows it to execute at every Windows startup.

This worm also copies itself to all .VBS and .VBE files found in all local and remote drives, effectively overwriting these infected files. If floppy disks or Zip disks are present in the disk drives, this worm attempts to infect these drives as well.
 
If you would like to scan your computer for VBS_VBSWG.AQ or thousands of other worms, viruses, Trojans and malicious code, visit HouseCall, Trend Micro's free online virus scanner at: http://housecall.antivirus.com/

VBS_VBSWG.AQ is detected and cleaned by Trend Micro pattern file #292 and above.

For additional information about VBS_VBSWG.AQ please visit: http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=VBS_VBSWG.AQ
 
3. 10 Most Prevalent In-the-Wild Malware Surveyed by Trend Micro US
(week of: May 27, 2002 to June 2, 2002)
------------------------------------------------------------------------
1. WORM_KLEZ.H
2. WORM_KLEZ.E
3. JS_EXCEPTION.GEN
4. JS_NOCLOSE.E
5. WORM_BENJAMIN.A
6. VBS_LOVELETTR.AS
7. PE_NIMDA.A-O
8. WORM_YAHA.B
9. WORM_BADTRANS.B
10. PE_MAGISTR.A

4. Trend Micro PC-cillin 2002 - Antivirus, Anti-Hacker, & PDA Virus Protection
------------------------------------------------------------------------
Trend Micro is pleased to announce the release of PC-cillin 2002.
PC-cillin 2002 provides award-winning protection against macro viruses, Trojans,
and other malicious threats. An integrated personal firewall helps secure
desktop computers against illegal access, ping attacks, and even port scanning
for Internet-era protection. This complete antivirus strategy also includes
security for Palm, Pocket PC, and EPOC devices.

BUY NOW: $39.95
http://www.trendmicro.com/pcc2002_wvr

If you already own PC-cillin, you may purchase an upgrade to PC-cillin 2002 for
just $19.95 at:
http://www.antivirus.com/pc-cillin/products/upgrade.htm

This pricing applies to customers in the U.S. and Canada only.

************************************************************************
You are receiving this email from Trend Micro, because you have either
downloaded a Trend Micro product or have signed up to receive the "Weekly Virus
Report." If you would like to change the way you receive email from
Trend Micro, please make changes in your account page at
http://www.antivirus.com/subscriptions/default.asp?email=trendmicro_pattern@netzwerk-aktiv.com
 
To UNSUBSCRIBE go to:
http://www.antivirus.com/subscriptions/default.asp?format=unsubscribe
 
For questions, comments, and suggestions about the Weekly Virus Report
please contact the Newsletters Editor at newsletters@trendmicro.com.
************************************************************************
Received on Sun Jun 9 18:19:41 2002

This archive was generated by hypermail 2.1.8 : Mon 29 May 2006 - 05:33:31 CEST