[THIN] Re: Medium Risk Virus Alert: WORM_WALLON.A

  • From: "Joanne Determann" <joanne.determann@xxxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Wed, 12 May 2004 09:04:47 -0400

I'm curious. How are people handling this one?
 Patching IE? I've had trouble with IE patches before and we are on
different versions here so patch management is tricky. (But can be
done.)
 Disabling ActiveX in GPO?=20
Using filtering allowing only trusted  Websites?

-----Original Message-----
From: Columna, Melvin [mailto:Melvin.Columna@xxxxxxxxx]=20
Sent: Tuesday, May 11, 2004 4:27 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Medium Risk Virus Alert: WORM_WALLON.A
Importance: High


------------------------------------------------------------------------
----
--------
Team,
Trend has just released information on a new virus that exploits 2
recently
reported Microsoft vulnerabilities, MS04-004 and MS04-013. Pattern file
889
will be released to address this virus.  More information to come.

-----------------------------------------------------------------

Dear Trend Micro customer,

As of May 11, 2004, 8:54 AM (GMT -07:00; Daylight Saving Time),
TrendLabs
has declared a Medium Risk Virus Alert to control the spread of
WORM_WALLON.A. TrendLabs has received Several infection reports
indicating
that this malware is spreading in Germany and EMEA.

This mass-mailing worm exploits certain vulnerabilities found on Windows
systems.
More information about these vulnerabilities can be found on the
following
Web sites:

MS04-004:
http://www.microsoft.com/technet/security/bulletin/ms04-004.mspx=20
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=3DMS_IE_V=
U
LNER
ABILITIES

MS04-013:
http://www.microsoft.com/technet/security/bulletin/ms04-013.mspx=20
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=3DMS04-01=
3
_MS_
OUTLOOK_EXPRESS

This worm exploits these vulnerabilities in order to download various
files
into the infected system.


TrendLabs will be releasing the following EPS deliverables:

            TMCM Outbreak Prevention Policy 114
            Official Pattern Release 889
            Damage Cleanup Template 341


For more information on WORM_WALLON.A, you can visit our Web site at:

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=3DWORM_WA=
L
LON.
A
********************************************************
This Week's Sponsor - RTO Software / TScale
What's keeping you from getting more from your terminal servers? Did you
know, in most cases, CPU Utilization IS NOT the single biggest
constraint to scaling up?! Get this free white paper to understand the
real constraints & how to overcome them. SAVE MONEY by scaling-up rather
than buying more servers.
http://www.rtosoft.com/Enter.asp?ID=3D147
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This Week's Sponsor - Tarantella Secure Global Desktop
Tarantella Secure Global Desktop Terminal Server Edition
Free Terminal Service Edition software with 2 years maintenance.
http://www.tarantella.com/ttba
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm

Other related posts: