-----Original Message----- From: news@xxxxxxxxxxxxx [mailto:news@xxxxxxxxxxxxx] Sent: Thursday, August 22, 2002 7:44 PM To: news@xxxxxxxxxxxxx Subject: Virus News: Trojan Virus Masquerades As Kaspersky Anti-Virus Virus News. Thursday, August 22, 2002 ****************************************************************** 1. Trojan Virus Masquerades As Kaspersky Anti-Virus 2. How to subscribe/unsubscribe **** 1. Trojan Virus Masquerades As Kaspersky Anti-Virus Kaspersky Labs warns computer users of a massive mailing of the Trojan-style malicious program, TrojanDownloader.Win32.Apher. Presently there have already been several registered reports of infection. The Trojan is sent out by an anonymous evildoer using an anonymous e-mail address from a public access e-mail service. The messages themselves have a spoofed address showing the sender as info@xxxxxxxxxxxxxx The infected message has the following attributes: ________________________________ From: info@xxxxxxxxxxxxx Subject: Protect Your NetWare with Kaspersky Anti-Virus Attachment: AAprices.exe Kaspersky Labs, an international data-security software developer, announces the official release of Kaspersky Anti-Virus 4.0. "We are pleased to present the latest version of our anti-virus product. The unique technology, updated design, and perfected administering system integrated into Kaspersky Anti-Virus 4.0 is the result of many years of work dedicated to improving the ease of working with the program and increasing computer defense reliability," said Natalya Kaspersky, Kaspersky Labs CEO. The new Kaspersky Anti-Virus version (Personal Pro, Personal, Lite) fully supports the Microsoft Windows XP operating system. Amongst this versions latest innovations are: a complete user interface upgrade corresponding to Tree Chart technology; perfected system installation that allows for the saving the configuration of previously installed versions, and a quarantine feature for isolating infected and suspicious objects; expanded treatment of infected archived files; an added function for the treatment of Microsoft Outlook Express and objects upon system start up and also a memory scanning of active applications; and simplified operating features for disk recovery. Best regards, If you have any questions please call +1(866) 7280-290 ____________________________________ If the attached file is accidentally opened "Apher" automatically initiates a connection with a remote web site. From this site a utility enabling the control of the virus "Backdoor.Death.25" is loaded on the infected machine. In turn, this program permits the evildoer to clandestinely manage an infected computer, to view and send out confidential information, and create, copy and delete files in addition to much more. The defense against "Apher" has already been added to the Kaspersky Anti-Virus database. ** 2. How to subscribe/unsubscribe If you would like to subscribe to other Kaspersky Lab news blocks or to unsubscribe from this news block, you can do so by visiting http://www.kaspersky.com/subscribenow.html If you experience any problems with this procedure, please contact us at: news@xxxxxxxxxxxxx **** Best of Luck, Kaspersky Lab News Agent ----- 10 Geroyev Panfilovtcev St., Moscow, 125363, Russia Telephone./Facsimile: +7 (095) 948 43 31 WWW: http://www.kaspersky.com, http://www.viruslist.com FTP: ftp://ftp.kasperskylab.ru E-mail: info@xxxxxx