|
Trend Micro Warns of
Destructive "VBS. NewLove. A" Email Virus: Users
Advised to Take Immediate Precautions
Extremely destructive new
Visual Basic script worm changes subject line and attachment
file name. Updated virus pattern file now available from
Trend Micro at www.pc-cillin.com.
Cupertino, CA - May 18, 2000
- Trend Micro Inc. (Japan OTC: 4704; NASDAQ: TMIC), a
leading provider of Internet content security, has released
a preliminary solution for VBS.NewLove. A, a
newly-discovered Visual Basic Script worm with a very
damaging payload. This NewLove virus infects Windows
95/98/NT/2000, and tries to spam itself to all users in the
Microsoft Outlook address book. However, unlike the recent
LoveLetter virus, NewLove.A has the ability to alter the
subject header on subsequent email iterations, and change
the name of attached files, making it more challenging to
detect. It is also much more destructive, since it goes
through all directories and replaces all existing files with
files that are zero bytes in length.
Isolated incidents of the
virus have been reported in the US West Coast, Europe and
Israel, but the virus does not appear to be spreading
rapidly at this time. Trend Micro customers are strongly
urged to update their virus protection software with the new
emergency virus pattern file #707.
Solutions Available from
Trend Micro
Trend Micro has created updated virus pattern file #707 to
detect VBS_NewLove.A and has released it via Trend Micro's
website at http://www.trend.com/pc-cillin/pattern.asp.
Trend Micro customers are advised that the new pattern file
has already been placed on the ActiveUpdate server, allowing
all Trend Micro products to download it immediately. Trend
Micro has also updated its free on-line scanning service,
HouseCall™ at http://housecall.antivirus.com.
Concerned users who are not currently using Trend Micro
software can take advantage of this free on-line service to
ensure that their systems are not infected. For More
information on the virus and how it can be stopped, please
consult Trend Micro's Virus Information Center at http://www.trend.com/pc-cillin/vinfo/
About VBS_NEWLOVE.A
VBS_NEWLOVE.A is a new Visual Basic Script worm with a very
damaging payload. Once executed, this virus tries to spam
itself to all users in the Microsoft Outlook address book.
VBS_NEWLOVE is also polymorphic, since it changes its code
with every new infection. New lines of random code are added
every time the virus tries to spread itself. Therefore, this
virus keeps increasing in size. The first sample received by
Trend was around 400 KB, which can cause a mail server to
slow down and eventually crash. This virus was obviously
inspired by the success of VBS_LOVELETTER, but behaves
differently. VBS_NEWLOVE.A does not use the same filename --
outgoing messages can have a different Subject line and
different file attachments. It is very destructive, since it
goes through all directories and replaces all files with
files that are zero bytes in length. Due to this Windows
does not function properly and will not start upon reboot.
Trend Micro engineers are continuing to study the effects of
this virus and users are advised to check for updated
information at http://www.trend.com/pc-cillin/vinfo/
Virus detection and
reporting tools:
Desktop users can scan their computers for free for
suspected viruses with Trend Micro's HouseCall, a free
online scanning service, found at http://housecall.antivirus.com.
HouseCall will be updated with the latest virus pattern
files when available, and will continue to be updated
throughout the virus alert situation to provide protection
against any variants that may appear.
To submit suspected virus
files to Trend Micro for analysis, please email the Virus
Team at virus_doctor@trendmicro.com.
Tracking occurrences or new variants will allow Trend Micro
to better serve the IT community.
To monitor activity and
travel patterns of viruses worldwide, in real-time, visit
Trend Micro's World Virus Tracking Center at http://wtc.trendmicro.com.
About Trend Micro
Trend Micro provides centrally controlled server-based virus
protection and content-filtering products and services. By
protecting information that flows through Internet gateways,
email servers, and file servers, Trend Micro allows
companies and managed service providers worldwide to stop
viruses and other malicious code from a central point before
they ever reach the desktop. Trend Micro's corporate
headquarters is located in Tokyo, Japan, with business units
in North and South America, Europe, Asia, and Australia.
Trend Micro's North American headquarters is located in
Cupertino, CA. Trend Micro's products are sold directly and
through a network of corporate, value-added resellers and
managed service providers. Evaluation copies of all of Trend
Micro's products may be downloaded from its award winning
web site, http://www.antivirus.com.
For Additional Information
Kristin Zoega (North/South
America)
Trend Micro Inc.
+1 (408) 257-1500 Ext. 6362
Email: kristin_zoega@trend.com.tw
Donna Rennemo (Europe/ UK)
Tel: +44 1628 421 508
Email: donna_rennemo@trendmicro.com
Yayoi Sakurai (Japan)
Tel: +81 3 5334 3618 ext. 8312
Email: yayoi_sakurai@trendmicro.co.jp
John DeRiso (Asia/Pacific)
Trend Micro, Inc.
(8862) 2378-9666 Ext. 378
Email: john_deriso@trend.com.tw
|
