-----Original Message----- From: Trend Virus Info [mailto:VirusInfo@xxxxxxxxxxxxxxxxxxxxxxxxxx] Sent: Friday, August 16, 2002 10:19 AM To: franciscus.lim@xxxxxxx Subject: TREND MICRO WEEKLY VIRUS REPORT ********************************************************************* TREND MICRO WEEKLY VIRUS REPORT (by TrendLabs Global Antivirus and Research Center) ********************************************************************* ------------------------------------------------------------------------ Date: August 16, 2002 ------------------------------------------------------------------------ To read an HTML version of this newsletter, go to: http://www.trendmicro.com/trendsetter/virus_report/ Issue Preview: 1. Trend Micro Updates - Pattern File and Scan Engine Updates 2. WORM_BIHUP.A Makes Itself Known (Low Risk) 3. 10 Most Prevalent In-the-Wild Malware Surveyed by Trend Micro US 4. FREE Virus Scan: Clean your system online with Trend Micro's HouseCall NOTE: Long URLs may break into two lines in some mail readers. Should this occur, please cut and paste the URL in your browser. ************************************************************************ 1. Trend Micro Updates - Pattern File and Scan Engine Updates ------------------------------------------------------------------------ PATTERN FILE: 335 http://www.trendmicro.com/download/pattern.asp SCAN ENGINE: 6.150 http://www.trendmicro.com/download/engines/ 2. WORM_BIHUP.A Makes Itself Known (Low Risk) ------------------------------------------------------------------------ This is a mass-mailing worm that sends itself to addresses found in unread email messages of Outlook Express. Upon execution, this worm loads some Mail Application Programming Interface (MAPI) functions, which it uses to send email messages. It checks for an "Outlook Express" window and then searches for unread messages. For each unread message, it retrieves the email address of the original sender. Then it sends an email message to that address with a copy of itself as attachment to the email. The subject and message of the email are written in Korean. The attachment may be one of the following: * Heddink.exe * Go Korea.exe * RedDevil.exe * WorldCup.exe * 2002.exe If you would like to scan your computer for WORM_BIHUP.A or thousands of other worms, viruses, Trojans and malicious code, visit HouseCall, Trend Micro's free online virus scanner at: http://housecall.antivirus.com/ WORM_BIHUP.A is detected and cleaned by Trend Micro pattern file #334 and above. For additional information about WORM_BIHUP.A please visit: http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_BIHUP.A 3. 10 Most Prevalent In-the-Wild Malware Surveyed by Trend Micro US (week of: August 5, 2002 to August 11, 2002) ------------------------------------------------------------------------ 1. WORM_KLEZ.H 2. JS_NOCLOSE.A 3. JS_EXCEPTION.GEN 4. PE_NIMDA.A-O 5. JS_NOCLOSE.E 6. PE_NIMDA.E 7. WORM_SIRCAM.A 8. WORM_YAHA.E 9. REG_STARTPAGE.A 10. PE_MAGISTR.A 4. FREE Virus Scan: Clean your system online with Trend Micro's HouseCall ------------------------------------------------------------------------ Get a quick checkup with HouseCall, Trend Micro's online virus scanner, to see if a computer virus, worm or Trojan has infected your system. HouseCall will scan your computer for new infections and help you to detect, clean and remove viruses for FREE. Try it NOW. http://housecall.antivirus.com/housecall/start_corp.asp Note: HouseCall is a one-time, manual virus scanner and does not offer you continual protection from viruses. For complete protection, we recommend using Trend Micro PC-cillin 2002. To buy PC-cillin online visit us at: http://www.digitalriver.com/dr/v2/ec_MAIN.Entry10?xid=16269&SP=10034&PN=1&V1 =889300 **Offer applies to customers in the U.S. and Canada only. ************************************************************************ You are receiving this email from Trend Micro, because you have either downloaded a Trend Micro product or have signed up to receive the "Weekly Virus Report." If you would like to change the way you receive email from Trend Micro, please make changes in your account page at http://www.trendmicro.com/subscriptions/default.asp?email=franciscus.lim@aig .com To UNSUBSCRIBE go to: http://www.trendmicro.com/subscriptions/default.asp?format=unsubscribe For questions, comments, and suggestions about the Weekly Virus Report please contact the Newsletters Editor at newsletters@xxxxxxxxxxxxxxx ************************************************************************