[virusinfo] Trend Micro Weekly Virus Report - June 24, 2005

  • From: "Mike" <mikebike@xxxxxxxxx>
  • To: virusinfo@xxxxxxxxxxxxx
  • Date: Fri, 24 Jun 2005 17:47:27 -0700

From: TREND MICRO WEEKLY VIRUS REPORT


(by TrendLabs Global Antivirus and Research Center)


---------------------------------------------------------------------
Date: Friday June 24, 2005

---------------------------------------------------------------------

To read an HTML version of this newsletter, go to: 

http://www.trendmicro.com/en/security/report/overview.htm

Issue Preview: 

1. Trend Micro Updates - Pattern File & Scan Engine Updates 

2. VBScript Worm - VBS_IPNUKER.A (Low Risk) 

3. Top 10 Most Prevalent Global Malware

4.  Stop Spyware Now: Trend Micro? Anti-Spyware for Small and Medium
Businesses 3.0 is Now Available
 
5. Trend Micro IM Security for Microsoft Office Live Communications Server

NOTE: Long URLs may break into two lines in some mail readers. 

Should this occur, please copy and paste the URL into your browser window.

************************************************************

1. Trend Micro Updates - Pattern File & Scan Engine Updates

------------------------------------------------------------------------

PATTERN FILE: 2.699.00 http://www.trendmicro.com/download/pattern.asp

SCAN ENGINE: 7.510 http://www.trendmicro.com/download/engine.asp 

2. VBScript Worm - VBS_IPNUKER.A (Low Risk)

------------------------------------------------------------------------

VBS_IPNUKER.A is a non-destructive, non-memory resident worm that
propagates only during the months of January, June, and December. It can
propagate through email messages and Internet Relay Chat (IRC). This worm
is currently spreading in-the-wild and infecting systems that run Windows
98, ME, NT, 2000, XP.

Upon execution, this VBscript switches the functions of the affected
machine's mouse buttons and changes the icons for such file types as MPEG,
MP3, JPEG, and TXT. It also deletes the application, Norton Antivirus, from
the Program files folder. 

It uses MAPI commands to propagate itself and to gather email addresses
stored in the affected system. It then sends out an email to the gathered
addresses. 

Upon arrival, this Visual Basic script (VBscript) drops the following files:

%Windows%\favorites\ipnuker.url 

%Windows%\ipnuker.vbs 

C:\mirc\ipnuker.vbs 

(Note: %Windows% is the Windows folder, which is usually C:\Windows or
C:\WINNT.)

It also creates a registry entry to enable its execution at every system
startup and deletes these types of files: .BAT, .TXT, and .VBS.

If you would like to scan your computer for VBS_IPNUKER.A or thousands of
other worms, viruses, Trojans and malicious code, visit HouseCall, Trend
Micro's free, online virus scanner at: http://housecall.trendmicro.com/

VBS_IPNUKER.A is detected and cleaned by Trend Micro pattern file #2.700.08
and above. 

For additional information about the VBS_IPNUKER.A please visit: 

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=VBS%5FIPNUKER%2EA



3. Top 10 Most Prevalent Global Malware (from June 17 to June 23, 2005)

---------------------------------------------------------------------------

1. JAVA_BYTEVER.A

2. HTML_NETSKY.P

3. TSPY_SMALL.SN

4. SPYW_GATOR

5. WORM_NETSKY.P

6. SPYW_DASHBAR.300

7. TROJ_DYFUCA.I

8. WORM_SOBER.K

9. SPYW_WEBSEARCH.A

10. PE_PARITE.A


4.  Stop Spyware Now: Trend Micro? Anti-Spyware for Small and Medium
Businesses 3.0 is Now Available
----------------------------------------------------------------------------------------
Worry-free spyware protection you can set and forget


Trend Micro?s worry-free anti-spyware safely and accurately protects your
growing business from spyware?including adware, key loggers, security
disablers, and browser hijackers (such as CoolWebSearch)?which drain
company resources and productivity and steal customer and business
information. Its trusted anti-spyware protection is backed by research and
development from TrendLabsSM, Trend Micro?s global network of security
researchers and engineers.

Learn more 

http://www.trendmicro.com/smb/antispyware/ 
 

Scan and Remove Spyware Free Online

http://www.trendmicro.com/spyware-scan/ 
----------------------------------------------------------------------------------------

5. Trend Micro IM Security for Microsoft Office Live Communications Server

Instant messaging (IM) via Microsoft Office Live Communications Server
(LCS) provides a fast and convenient way for colleagues to locate and
communicate with each other in real time via text messages. However, 
worms that propagate via IM - such as Bropia, Kelvir, and Fatso - 
are becoming more prevalent. 

Without a secure environment for IM, viruses can spread and downgrade
business productivity. Without proper monitoring and control, trade secrets
can be lost and legal problems can arise from inappropriate content or use
of company resources. Trend Micro IM Security for Microsoft LCS delivers
advanced protection from malicious code and inappropriate content. IM
Security runs with minimal performance impact to LCS and can be centrally
managed and administered to help administrators deploy and maintain a
virus-free IM environment with secure content. 

Learn more about Trend Micro IM Security for Microsoft Office Live
Communications Server 

Download a 30-day evaluation copy 

**********************************************************
____________________________________________________________
This message was sent by Trend Micro's Newsletters Editor using Responsys
Interact (TM).


To view our permission marketing policy:
    http://www.rsvp0.net
Copyright 1989-2005 Trend Micro, Inc.  All rights reserved
Trend Micro, Inc., 10101 N. De Anza Blvd., Suite 200, Cupertino, CA 95014

*********** MIKE"S REPLY SEPARATOR  ***********
Mike ~ It is a good day if I learned something new.
Editor MikesWhatsNews see a sample on my web page
http://www3.telus.net/mikebike
<mikeswhatsnews-request@xxxxxxxxxxxxx?Subject=subscribe>
http://www3.telus.net/mikebike/worm_removal.htm
See my Anti-Virus pages  http://virusinfo.hackfix.org/index
<virusinfo-request@xxxxxxxxxxxxx?Subject=subscribe>
A Technical Support Alliance  and OWTA Charter Member 



Other related posts:

  • » [virusinfo] Trend Micro Weekly Virus Report - June 24, 2005