----- Original Message -----
From: <[log in to unmask]>
To: <[log in to unmask]>
Sent: Thursday, November 02, 2000 9:53 PM
Subject: Trend Virus Report - November 2000 Issue # 1
***********************************************************************
V I R U S R E P O R T
(by the Trend Micro US Virus Research Group)
************************************************************************
------------------------------------------------------------------------
Date: 11.02.2000 Issue Number: 11/01
------------------------------------------------------------------------
To read an HTML version of this newsletter, go to:
http://www.antivirus.com/trendsetter/virus_report/
To read about Safe Computing Practices, please visit:
http://www.antivirus.com/vinfo/safe_computing/
If you're a corporate user and want to assess your virus protection,
check out Trend's Virus Risk Assessment website at:
http://www.antivirus.com/free_tools/edoctor/
Issue Preview:
1. TREND UPDATES: Pattern File and Scan Engine Updates
2. TROJ_SONIC (A new Backdoor Trojan reported in-the-wild)
3. 10 Most Prevalent In-the-Wild Malware Surveyed by Trend US
4. Top 10 Viruses Trend US Customers are Most Concerned About
5. Get 20% Off on Trend ScanMail for Lotus Notes
************************************************************************
1. TREND UPDATES: Scan Engine and Pattern File Updates
------------------------------------------------------------------------
PATTERN FILE: 790 (http://www.antivirus.com/download/pattern.asp)
SCAN ENGINE: 5.2 (http://www.antivirus.com/download/engines/)
2. TROJ_SONIC (A new Backdoor Trojan reported in-the-wild)
------------------------------------------------------------------------
TROJ_SONIC is a new backdoor Trojan and worm, which was recently reported
in several countries around the world. This multi-component Internet worm,
and Backdoor tool spreads via email. It disguises itself as a Windows native
executable GDI32.EXE and comes via email as a UPX compressed file. When
executed,
it connects to a predetermined host and downloads its main component into
the
infected computer. Upon execution of the main component, the Trojan searches
for
Windows Address Book files (*.WAB) and uses the email addresses found there
to
spread. It sends an email to all addresses found with itself as an
attachment,
"LOVERS.EXE". This email has the subject: "I'm your poison".
Trend does not expect any further outbreaks as the Hotmail website, which
hosted
the main component of the Trojan has been removed.
TROJ_SONIC.B is detected and removed with Trend pattern #793 and above.
For additional information about this virus, please refer to our website at:
http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=TROJ_SONIC.B
3. 10 Most Prevalent In-The-Wild Malware Surveyed by Trend US
(week of: 10/23/2000 to 10/29/2000)
------------------------------------------------------------------------
1. VBS_KAKWORM.A
2. TROJ_MTX.A
3. TROJ_QAZ.A
4. TROJ_BYMER
5. TROJ_SKA
6. VBS_NETLOG.WORM
7. VBS_LOVELETTER.AS
8. VBS_STAGES.A
9. VBS_LOVELETTER
10. TROJ_MSINIT.A
Trend Micro also offers the first real-time World Virus Tracking Center,
which shows the regional distribution of viruses worldwide during the past
24 hours, past 7 days and past 30 days. The World Virus Tracking Center can
be accessed at: http://wtc.trendmicro.com/wtc/
4. Top 10 Viruses Trend US Customers are Most Concerned About
(where systems were not infected)
------------------------------------------------------------------------
1. VBS_KAKWORM.A
2. TROJ_MTX.A
3. TROJ_QAZ.A
4. PE_FUNLOVE.4099
5. TROJ_BYMER
6. VBS_COLUMBIA
7. VBS_LOVELETTER.AS
8. TROJ_PRETTY_PARK
9. TROJ_SKA
10. VBS_NETLOG.B
5. Get 20% Off on Trend ScanMail for Lotus Notes
------------------------------------------------------------------------
Trend invites you to purchase a copy of ScanMail for Lotus Notes, the
best-of-breed antivirus solution for the Lotus Notes/Domino market for 20%
off. With ScanMail you get a stable, scalable and secure solution that
respects your need for zero down time and zero tolerance security. ScanMail
for Lotus Notes provides protection for all platforms (NT, Solaris, AIX,
S/390 and AS/400) to give you the best antivirus solution, no matter where
you are running Lotus Notes/Domino servers.
Purchase now for 20% off or download a 30-day trial copy at:
http://www.antivirus.com/banners/tracking.asp?si=63&bi=181&ul=http://www.ant
ivirus.com/smln_offer
************************************************************************
You are receiving this email from Trend Micro, because you have either
downloaded a Trend product or have signed up for our "Weekly Virus Report".
If you would like to alter the way you receive email from Trend, please make
appropriate changes in your account page at
[log in to unmask]" target="_blank">http:[log in to unmask]
For suggestions and comments, please send an email to [log in to unmask]
************************************************************************
VICUG-L is the Visually Impaired Computer User Group List.
To join or leave the list, send a message to
[log in to unmask] In the body of the message, simply type
"subscribe vicug-l" or "unsubscribe vicug-l" without the quotations.
VICUG-L is archived on the World Wide Web at
http://maelstrom.stjohns.edu/archives/vicug-l.html
|
