-----Original Message----- From: Trend Virus Info [mailto:VirusInfo@xxxxxxxxxxxxxxxxxxxxxxxxxx] Sent: Wednesday, October 02, 2002 12:44 AM To: franciscus.lim@xxxxxxx Subject: Trend Micro Medium Risk Virus Alert - WORM_BUGBEAR.A Dear Trend Micro Customer: This worm terminates antivirus processes and propagates by sending itself via email using its own SMTP (Simple Mail Transfer Protocol) engine. The email that it sends out contains no message body and uses any of the following as its subject: $150 FREE Bonus! 25 merchants and rising Announcement bad news CALL FOR INFORMATION! click on this! Confirmation of Recipes... Correction of errors Daily Email Reminder empty account fantastic free shipping! Get 8 FREE issues - no risk! Get a FREE gift! Greets! hello! history screen hmm.. I need help about script!!! Interesting... Introduction its easy Just a reminder Lost & Found Market Update Report Membership Confirmation My eBay ads New bonus in your cash account New Contests new reading Payment notices Please Help... Report SCAM alert!!! Sponsors needed Stats Today Only Tools For Your Online Business update various Warning! Your Gift Your News Alert The email attachment may be one of these: Setup.exe 3 July 2002.doc.pif It spoofs the FROM field of the email that it sends out while the TO field contains addresses found in the Windows Address Book (WAB). This worm exploits a known vulnerability on systems with unpatched Internet Explorer 5.01 and 5.5, which automatically runs the executable file attachment when the email message is previewed or opened in Microsoft Outlook and Outlook Express. For more information on WORM_BUGBEAR.A please visit our Web site at: http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_BUGBEAR .A **************************************************************************** ************** You are receiving this email from Trend Micro, because you have either downloaded a Trend Micro product or have signed up to receive "Virus Alerts." If you would like to change the way you receive email from Trend Micro please make changes in your account page at http://www.antivirus.com/subscriptions/default.asp?email=franciscus.lim@aig. com To UNSUBSCRIBE go to: http://www.antivirus.com/subscriptions/default.asp?format=unsubscribe **************************************************************************** ***************