Trend Micro Weekly Virus Report - November 22, 2002

*********************************************************************
TREND MICRO WEEKLY VIRUS REPORT
    
(by TrendLabs Global Antivirus and Research Center)
*********************************************************************
------------------------------------------------------------------------
Date: November 22, 2002
------------------------------------------------------------------------
To read an HTML version of this newsletter, go to:
http://www.trendmicro.com/en/security/report/overview.htm

Issue Preview:

1. Trend Micro Updates - Pattern File & Scan Engine Updates
2. Your Free Gift – WORM_FREGIT (Low Risk)
3. 10 Most Prevalent In-the-Wild Malware Surveyed by Trend Micro US
4. New! PC-cillin 2003 – Virus Protection and Internet Security for Home Users

NOTE: Long URLs may break into two lines in some mail readers.
Should this occur, please copy and paste the URL into your browser window.

************************************************************************

1. Trend Micro Updates - Pattern File, Scan Engine, & Antispam Updates
------------------------------------------------------------------------
PATTERN FILE: 389 http://www.trendmicro.com/download/pattern.asp
SCAN ENGINE: 6.150 http://www.trendmicro.com/download/engines/

2. Your Free Gift – WORM_FREGIT (Low Risk)
------------------------------------------------------------------------
WORM_FREGIT.A and its variants, WORM_FREGIT.B and WORM_FREGIT.C, are non-destructive, memory-resident, non-encrypted worms that use Microsoft Outlook to send themselves as attachments to an email message sent to all addresses listed in the infected user’s Microsoft Outlook address book.

These worms arrive in an email as an attachment named FreeGift.scr. Upon execution, the worm copies itself to a FreeGift.scr file in the Windows System directory and creates a registry entry so that its dropped copy, FreeGift.scr, automatically executes at every Windows startup.

The email subject line of the message it sends, is chosen from a fixed list of possibilities, and the message body contains the following (the message starts and ends with any of the following):
Message Body:
>>>>>>><<<<<<<>>>>>>><<<<<<<>>>>>>><<<<
--------------------------------------------------------------
========================================
*************************************************************
###########################################
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Free Gift" Requested For: <Recipient>

This email was originally requested by this very kind person to send you a free gift! Your free gift (in the atachments) is an installation package that will download your free software (along with a setup file) from our home page (http://www.freegift.<ext> /)

If you have any setup difficulties or troubleshooting on how to use the setup, contact and you will be emailed back shortly.

Have fun with your free gift!
Attachment: Free_Gift.scr

The extension of the URL provided in the email message may be .net, .com, or .co.uk. The worm randomly selects the creator’s address from three fixed lists of possibilities.

If you would like to scan your computer for any of the variants of WORM_FREGIT or thousands of other worms, viruses, Trojans and malicious code, visit HouseCall, Trend Micro's free online virus scanner at: http://housecall.trendmicro.com/

WORM_FREGIT.A, WORM_FREGIT.B, and WORM_FREGIT.C are detected and cleaned by Trend Micro pattern file #388 and above.

For additional information about WORM_FREGIT.A please visit: http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_FREGIT.A

3. 10 Most Prevalent In-the-Wild Malware Surveyed by Trend Micro US
(week of: November 11, 2002 to November 17, 2002)
------------------------------------------------------------------------
1. WORM_KLEZ.H
2. WORM_BUGBEAR.A
3. WORM_OPASERV.A
4. JS_EXCEPTION.GEN
5. WORM_YAHA.G
6. JS_NOCLOSE.E
7. WORM_OPASERV.G
8. WORM_OPASERV.F
9. WORM.OPASERV.A
10. WORM_OPASERV.E

4. New! PC-cillin 2003 – Virus Protection and Internet Security for Home Users
------------------------------------------------------------------------
Protect your computer and PDA from viruses at home or on the go with PC-cillin 2003. PC-cillin combines advanced virus detection and cleaning with an integrated firewall to safeguard your system from hackers and malicious code threats in email and instant messaging, and while browsing the Internet.

With PC-cillin 2003 you get the benefits of:
-Comprehensive Antivirus Protection
-New! Secure Wireless Internet Access
-New! Proactive Virus Outbreak Notification
-Integrated PDA Protection

New features like Wi-Fi protection helps secure your computer when connecting to a wireless LAN network, and Outbreak Alert gives you early warning about new viruses.

Buy now* and get all-in-one antivirus security, personal firewall, and PDA protection for 20% off** on single user PC-cillin licenses.
http://www.digitalriver.com/dr/v2/ec_MAIN.Entry17c?CID=64779&PN=21&SP=10007&SID=16269&PID=1047203

Already a PC-cillin user? You can upgrade to the new version for only $24.95
http://www.digitalriver.com/dr/v2/ec_MAIN.Entry17c?CID=0&PN=21&SP=10007&SID=16269&PID=1046260

*Offer valid for residents of the US and Canada only.
**Offer expires December 15, 2002

______________________________________________________________________
This message was sent by Trend Micro's Newsletters Editor using Responsys Interact (TM).

If you prefer not to receive future e-mail from Trend Micro's Newsletters Editor:
mmLkgFgLmSPLkr-HrmpODJhtEf

To view our permission marketing policy:
    http://www.rsvp0.net
Received on Sat Nov 23 00:51:52 2002