-=PCTechTalk=- Virus Alert
- From: "David F. Wooledge" <wooledge001@xxxxxxxx>
- To: "@freelistts PCTechTalk" <pctechtalk@xxxxxxxxxxxxx>, accmail Juno <juno_accmail@xxxxxxxxxxxxx>
- Date: Fri, 4 Feb 2005 10:43:02 -0800 (PST)
Trend Micro Newsletters Editor <editor@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote:Date:
Wed, 2 Feb 2005 21:01:54 -0800
From: "Trend Micro Newsletters Editor"
Subject: Trend Micro Medium Risk Virus Alert - WORM_BROPIA.F
To: wooledge001@xxxxxxxxxxx
Dear Trend Micro customer,
As of February 2, 2005, 6:55 PM (GMT - 08:00), TrendLabs has declared a Medium
Risk Virus Alert to control the spread of WORM_BROPIA.F.
TrendLabs has received numerous infection reports indicating that this malware
is spreading in the Bolivia, U.S., Korea, Taiwan, Mexico, and China.
This is a memory-resident worm that drops a copy of itself in the root folder
using different interesting file names with a PIF extension.
It attempts to propagate by sending copies of itself to all MSN Messenger
contacts.
It also drops the file WINHOST.EXE in the Windows system folder. Trend Micro
detects the said file as WORM_AGOBOT.AJC.
It has an anti-debugging technique, which enables it not to run if any of the
following debugging applications are present on the affected system:
? NT-ice
? Softice
It also drops and displays an image file, named SEXY.JPG.
TrendLabs will be releasing the following EPS deliverables:
TMCM Outbreak Prevention Policy 144
Official Pattern Release 2.390.00
Damage Cleanup Template 505
For more information on WORM_BROPIA.F, you can visit our Web site at:
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_BROPIA.F
You can modify subscription settings for Trend Micro newsletters at:
http://www.trendmicro.com/subscriptions/default.asp
----------------------------------------------o0o----
IMPORTANT NOTE!
TrendLabs will also be releasing a 3-digit pattern file 988 that corresponds
with the pattern indicated in this email. This 3-digit pattern is a special
release for users running non-NPF compliant products (i.e., old 3-digit pattern
format) and is designed to provide protection against the most current malware
threats. Users running non-NPF compliant products are still urged to apply the
NPF
solution . These users may also upgrade to the latest product version. Only
NPF-compliant products will be able to update with regular pattern releases.
______________________________________________________________________
This message was sent by Trend Micro's Newsletters Editor using Responsys
Interact (TM).
David F Wooledge
Mental Health Advocate
237 Goodrich Street
Erie PA 16508-1818
814-459-0741
814-217-1920
717-441-4910 (DBSA PA)
717-441-4911 (Laptop Soft Phone)
814-602-0510 (cell)
814-217-1936 (fax)
814-456-6593 (fax MHA of NP)
wooledge001@xxxxxxxx
dwooledge@xxxxxxxx
http://www.vtext.com/users/8146020510
http://www.geocities.com/wooledge001_/
http://www.mental-health-advocate.us
To unsub or change your email settings:
//www.freelists.org/webpage/pctechtalk
To access our Archives:
http://groups.yahoo.com/group/PCTechTalk/messages/
//www.freelists.org/archives/pctechtalk/
For more info:
//www.freelists.org/cgi-bin/list?list_id=pctechtalk
Other related posts:
- » -=PCTechTalk=- Virus Alert
