TREND MICRO WEEKLY VIRUS REPORT:
Friday March 10, 2006
|
Issue Preview:
1. Trend Micro Updates - Pattern File & Scan Engine Updates
2. CAB It - PE_ICABDI.A (Low Risk)
3. Top 10 Most Prevalent Global Malware
4. Your Feedback is Important to Us -- Participate in our Survey
5. Announcement: Weekly Virus Report Format Change
|
|
|
1. Trend Micro Updates - Pattern File & Scan Engine Updates
Pattern File : 3.255.00
Scan engine : 8.000
2. CAB It - PE_ICABDI.A (Low Risk)
PE_ICABDI.A is non-destructive proof-of-concept malware that attempts to infect
Microsoft Infopath .XSN files. Infopath is an application used to develop XML-
based user forms. This file infector is currently spreading in-the-wild and
infecting computers running Windows 2000, XP, and Server 2003.
The malware creates a temporary folder named iCab, and then copies a target XSN
file that attempts to infect in the temporary folder. The contents of the file
are then extracted.
To infect the XSN file, it inserts a malicious script inside the script.js of the
target XSN file. To clean up traces of its malicious routine, it then attempts
to recreate the original (already infected) file, and delete iCab and all its
contents. However, due to errors in its code, it is unable to perform its file
infection and cleanup routines.
If you would like to scan your computer for PE_ICABDI.A or thousands of other worms,
viruses, Trojans and malicious code, visit HouseCall, Trend Micro's free, online virus
scanner at: http://trendnewsletter.rsc03.net/servlet/cc5?lgLQSRYDQTVrjxpuipjLuLKpHQJhuV2VU
For additional information about the PE_ICABDI.A please visit:
http://trendnewsletter.rsc03.net/servlet/cc5?lgLQSRYDQTVrjxpuipjLuLKpHQJhuV2VW
3. Top 10 Most Prevelant Global Malware
(from February 17 to February 23, 2006)
- WORM_NYXBM.E
- SPYW_DASHBAR.300
- SPYW_GATOR.F
- HTML_NETSKY.P
- WORM_NETSKY.P
- ADW_SLAGENT.A
- WORM_MOFEI.B
- TROJ_AGENT.BCN
- EXPL_WMF.GEN
- JAVA_BYTEVER.A
4. Your Feedback is Important to Us -- Participate in our Survey
Do your part to help Trend Micro stop security threats. Take a few moments to fill
out this simple survey, and provide us with your feedback.
Your feedback is important to us. Take the Survey now.
Survey ends Thursday March 16, 2006.
5. Announcement: Weekly Virus Report Format Change
Trend Micro is changing the format of the Weekly Virus Report. Beginning in April,
the "Weekly Virus Report" will become "First Line of Defense" - a semi-monthly newsletter
containing articles and information on recent and emerging threats, as well as advice
on how to protect your content from these threats.
Trend Micro is interested in your comments regarding the change in frequency of this
newsletter (from weekly to bi-monthly) as well as the content. Which
content attributes do you find most/least helpful (Top 10 threats, threat types, how
to protect your computer/personal information from the threats, etc).
|
|
|
< Back
|