-Caveat Lector-
**************************************************
V I R U S R E P O R T
(by Trend US Virus Research Group)
***************************************************
---------------------------------------------------
Date: 08.09.99 Issue: 8.2
---------------------------------------------------
Issue Preview: VBS_Monopoly, 10 Most Prevalent In-The-Wild
Viruses, Top Viruses that concern Trend customers,
W97M_YUGOSLAV and TROJ_BO2K.PLUG
***************************************************
1. Another Melissa re-write: VBS_MONOPOLY
------------------------------------------------
If there was a popularity contest for viruses, we would
have to give the most recent Award to the Melissa virus.
In recent weeks, we have seen several viruses inspired by
Melissa. Among the most recent ones is VBS_MONOPOLY, a
rewrite of Melissa in Visual Basic Script language.
Just like many of the other Melissa viruses, VBS_MONOPOLY
tries to send an email message (with an attachment) to all
addresses in the Microsoft Outlook address book.
For additional payload information, please go to:
http://www.antivirus.com/vinfo/virusencyclo/default3.asp?VCode
=30000263
While we have not seen any reports of VBS_MONOPOLY infections,
we advise all our customers to upgrade to Trend pattern file
567 or later, which detects this virus.
2. 10 Most Prevalent In-The-Viruses Surveyed by Trend US
(week of: 08/02/99 to 08/08/99)
-----------------------------------------------------
1. TROJ_SKA
2. JOKE_SMALLPENIS
3. TROJ_GESCHENK
4. W97M_ETHAN.A
5. TROJ_BKDOOR-G
6. W97M_MARKER
7. TROJ_WOW
8. W97M_GROOVIE
9. W97M_CLASS
10. TROJ_BO2K
For the most prevalent viruses for the month of June'99,
please visit our website at:
http://www.antivirus.com/vinfo/most_prevalent.htm
3. Top Viruses that Trend Customers are Concerned About
(where systems were not infected)
------------------------------------------------------------
1. TROJ_PROMAIL121
2. CALIFORNIA/WOBBLER HOAX
3. JOKE_LANCHECK
4. TROJ_BKDOOR-G
5. TROJ_SKA
6. How to give a cat a colonic (HOAX)
7. MATRIX
8. TROJ_NETBUS
4. W97M_YUGOSLAV (a.k.a. W97M.Marker.X)
--------------------------------------------
W97M_YUGOLAV is another polymorphic macro virus, which infects
Word 97 documents. It triggers a destructive payload on
February 22nd, and deletes all files in the C:\ root
directory.
For a detailed virus description, please refer to our website
at:
http://www.antivirus.com/vinfo/virusencyclo/default3.asp?VCode
=30000256
W97M_YUGOSLAV is detected and cleaned with Trend pattern file
567 or later.
5. Another plug-in for Back Orifice 2000: TROJ_BO2K.PLUG
---------------------------------------------------------
Last week L0pht Heavy Industries released a new hacking tool,
which adds a point-and-click graphical interface and remote
registry editor to Back Orifice 2000.
To detect this new plug-in, please update your Trend pattern
file to version 567 or later.
Information about BO2K (Back Orifice 2000)is available on our
website at:
http://www.antivirus.com/vinfo/virusencyclo/default3.asp?VCode
=30000215
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++
If you would like to subscribe to this newsletter, go to :
http://www.antivirus.com/subscriptions/sub_vreport.asp?[EMAIL PROTECTED]
To unsubscribe to this newsletter, go to :
http://www.antivirus.com/subscriptions/un_vreport.asp?[EMAIL PROTECTED]
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++
DECLARATION & DISCLAIMER
==========
CTRL is a discussion and informational exchange list. Proselyzting propagandic
screeds are not allowed. Substance�not soapboxing! These are sordid matters
and 'conspiracy theory', with its many half-truths, misdirections and outright
frauds is used politically by different groups with major and minor effects
spread throughout the spectrum of time and thought. That being said, CTRL
gives no endorsement to the validity of posts, and always suggests to readers;
be wary of what you read. CTRL gives no credeence to Holocaust denial and
nazi's need not apply.
Let us please be civil and as always, Caveat Lector.
========================================================================
Archives Available at:
http://home.ease.lsoft.com/archives/CTRL.html
http:[EMAIL PROTECTED]/
========================================================================
To subscribe to Conspiracy Theory Research List[CTRL] send email:
SUBSCRIBE CTRL [to:] [EMAIL PROTECTED]
To UNsubscribe to Conspiracy Theory Research List[CTRL] send email:
SIGNOFF CTRL [to:] [EMAIL PROTECTED]
Om
