From: TREND MICRO WEEKLY VIRUS REPORT (by TrendLabs Global Antivirus and Research Center) --------------------------------------------------------------------- Date: Friday June 24, 2005 --------------------------------------------------------------------- To read an HTML version of this newsletter, go to: http://www.trendmicro.com/en/security/report/overview.htm Issue Preview: 1. Trend Micro Updates - Pattern File & Scan Engine Updates 2. VBScript Worm - VBS_IPNUKER.A (Low Risk) 3. Top 10 Most Prevalent Global Malware 4. Stop Spyware Now: Trend Micro? Anti-Spyware for Small and Medium Businesses 3.0 is Now Available 5. Trend Micro IM Security for Microsoft Office Live Communications Server NOTE: Long URLs may break into two lines in some mail readers. Should this occur, please copy and paste the URL into your browser window. ************************************************************ 1. Trend Micro Updates - Pattern File & Scan Engine Updates ------------------------------------------------------------------------ PATTERN FILE: 2.699.00 http://www.trendmicro.com/download/pattern.asp SCAN ENGINE: 7.510 http://www.trendmicro.com/download/engine.asp 2. VBScript Worm - VBS_IPNUKER.A (Low Risk) ------------------------------------------------------------------------ VBS_IPNUKER.A is a non-destructive, non-memory resident worm that propagates only during the months of January, June, and December. It can propagate through email messages and Internet Relay Chat (IRC). This worm is currently spreading in-the-wild and infecting systems that run Windows 98, ME, NT, 2000, XP. Upon execution, this VBscript switches the functions of the affected machine's mouse buttons and changes the icons for such file types as MPEG, MP3, JPEG, and TXT. It also deletes the application, Norton Antivirus, from the Program files folder. It uses MAPI commands to propagate itself and to gather email addresses stored in the affected system. It then sends out an email to the gathered addresses. Upon arrival, this Visual Basic script (VBscript) drops the following files: %Windows%\favorites\ipnuker.url %Windows%\ipnuker.vbs C:\mirc\ipnuker.vbs (Note: %Windows% is the Windows folder, which is usually C:\Windows or C:\WINNT.) It also creates a registry entry to enable its execution at every system startup and deletes these types of files: .BAT, .TXT, and .VBS. If you would like to scan your computer for VBS_IPNUKER.A or thousands of other worms, viruses, Trojans and malicious code, visit HouseCall, Trend Micro's free, online virus scanner at: http://housecall.trendmicro.com/ VBS_IPNUKER.A is detected and cleaned by Trend Micro pattern file #2.700.08 and above. For additional information about the VBS_IPNUKER.A please visit: http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=VBS%5FIPNUKER%2EA 3. Top 10 Most Prevalent Global Malware (from June 17 to June 23, 2005) --------------------------------------------------------------------------- 1. JAVA_BYTEVER.A 2. HTML_NETSKY.P 3. TSPY_SMALL.SN 4. SPYW_GATOR 5. WORM_NETSKY.P 6. SPYW_DASHBAR.300 7. TROJ_DYFUCA.I 8. WORM_SOBER.K 9. SPYW_WEBSEARCH.A 10. PE_PARITE.A 4. Stop Spyware Now: Trend Micro? Anti-Spyware for Small and Medium Businesses 3.0 is Now Available ---------------------------------------------------------------------------------------- Worry-free spyware protection you can set and forget Trend Micro?s worry-free anti-spyware safely and accurately protects your growing business from spyware?including adware, key loggers, security disablers, and browser hijackers (such as CoolWebSearch)?which drain company resources and productivity and steal customer and business information. Its trusted anti-spyware protection is backed by research and development from TrendLabsSM, Trend Micro?s global network of security researchers and engineers. Learn more http://www.trendmicro.com/smb/antispyware/ Scan and Remove Spyware Free Online http://www.trendmicro.com/spyware-scan/ ---------------------------------------------------------------------------------------- 5. Trend Micro IM Security for Microsoft Office Live Communications Server Instant messaging (IM) via Microsoft Office Live Communications Server (LCS) provides a fast and convenient way for colleagues to locate and communicate with each other in real time via text messages. However, worms that propagate via IM - such as Bropia, Kelvir, and Fatso - are becoming more prevalent. Without a secure environment for IM, viruses can spread and downgrade business productivity. Without proper monitoring and control, trade secrets can be lost and legal problems can arise from inappropriate content or use of company resources. Trend Micro IM Security for Microsoft LCS delivers advanced protection from malicious code and inappropriate content. IM Security runs with minimal performance impact to LCS and can be centrally managed and administered to help administrators deploy and maintain a virus-free IM environment with secure content. Learn more about Trend Micro IM Security for Microsoft Office Live Communications Server Download a 30-day evaluation copy ********************************************************** ____________________________________________________________ This message was sent by Trend Micro's Newsletters Editor using Responsys Interact (TM). To view our permission marketing policy: http://www.rsvp0.net Copyright 1989-2005 Trend Micro, Inc. All rights reserved Trend Micro, Inc., 10101 N. De Anza Blvd., Suite 200, Cupertino, CA 95014 *********** MIKE"S REPLY SEPARATOR *********** Mike ~ It is a good day if I learned something new. Editor MikesWhatsNews see a sample on my web page http://www3.telus.net/mikebike <mikeswhatsnews-request@xxxxxxxxxxxxx?Subject=subscribe> http://www3.telus.net/mikebike/worm_removal.htm See my Anti-Virus pages http://virusinfo.hackfix.org/index <virusinfo-request@xxxxxxxxxxxxx?Subject=subscribe> A Technical Support Alliance and OWTA Charter Member