|
Virus Advisory From Trend
Micro: "W97M_Resume.A"
New Worm Spreads through
Outlook Email, Deleting Files on System Drives; Trend Micro
offers free scanning, updated protection to customers
Cupertino, CA - May 26, 2000
- Trend Micro Inc. (Nasdaq:TMIC), today announced the
discovery of W97M_Resume.A --a worm which spreads through
Outlook email and can delete all files in selected
directories.. Trend Micro is offering immediate protection
with updated pattern file # 715, and the HouseCall free
online virus scanner.
First reported in around noon
(PST) in the United States, this virus has the potential to
spread rapidly through user's email. The virus, hidden in a
document called "Explorer.doc" is delivered in a
message with the subject header "Resume-Janet
Simons", and the message beginning, "Attached is
my resume with a list of references contained within."
Once opened, the virus activates and attempts to save itself
to the local drive, mail itself to all users in the Outlook
address book, and activate a destructive payload, deleting
all files in the C:\Windows\, C:\WINDOWS\SYSTEM\, C:\WINNT\,
C:\WINNT\SYSTEM32\, and C:\MyDocuments directories, as well
as in other root directories. This payload renders the
system unusable.
Trend Micro has determined
this virus to be currently "in-the-wild". Eight US
corporate sites have reported the virus representing over
20,000 users. Among these it is not known how many users
have been affected. All computer users are encouraged to
immediately delete the virus attachment if received and
filter out any emails with the attachment "Explorer.doc"
and with subject header "Resume-Janet Simons".
Trend Micro customers are
strongly recommended to update their virus protection
software with the latest virus pattern file updates from our
website at http://www.trend.com/pc-cillin/pattern.asp.
Pattern file #715 or higher will detect and clean the
W97M_Resume.A virus file. Virus pattern files will continue
to be updated throughout the virus alert period as new
information is known or new variants are detected. Manual
scans of affected mail servers, file servers, and PCs should
be executed as soon as possible.
Organizations who do not
currently use Trend Micro products may download a free
evaluation copy of ScanMail for Exchange/ InterScan
VirusWall/ ServerProtect plus the latest virus pattern file
to clean their mail/groupware servers/ desktops. Also
available for desktop virus protection is Trend Micro's free
on-line scanning service, HouseCall, found at http://housecall.antivirus.com.
To submit suspected virus
file to Trend Micro for analysis, please email the virus
team at virus_doctor@trendmicro.com
For more information on the
W97M_Resume.A virus and how it can be stopped, please
consult Trend Micro's Virus Information Center at http://www.trend.com/pc-cillin/vinfo/.
About Trend Micro
Trend Micro provides centrally controlled server-based virus
protection and content-filtering products and services. By
protecting information that flows through Internet gateways,
email servers, and file servers, Trend Micro allows
companies and managed service providers worldwide to stop
viruses and other malicious code from a central point before
they ever reach the desktop.
Trend Micro's corporate
headquarters is located in Tokyo, Japan, with business units
in North and South America, Europe, Asia, and Australia.
Trend Micro's North American headquarters is located in
Cupertino, CA. Trend Micro's products are sold directly and
through a network of corporate, value-added resellers and
managed service providers. Evaluation copies of all of Trend
Micro's products may be downloaded from its awarding winning
Website, http://www.antivirus.com.
For Additional Information
North America
Kristin Zoega
Tel: +1 408-863-6362
or 1-408-497-6542
Email: Kristin_Zoega@trend.com.tw
Sandi Morgenthaler
888-696-9365
Email: Sandi_Morgenthaler@trendmicro.com
or
Europe
Donna Rennemo
Tel: 47-90 66 90 33
|
