Another Alert

[martymas]

hi team here is another alert marty

(by TrendLabs Global Antivirus and Research Center)

*********************************************************************

------------------------------------------------------------------------

Date: Friday February 11, 2005

------------------------------------------------------------------------

To read an HTML version of this newsletter, go to:

http://trendnewsletter.rsc03.net/servlet/c...pgLlQgLlQgFV2VR

Issue Preview:

1. Trend Micro Updates - Pattern File & Scan Engine Updates

2. Locked Up – SYMBOS_LOCKNUT.A (Low Risk)

3. Top 10 Most Prevalent Global Malware

4. Learn the Basics of Malware and How it Affects You: Phishing,

Trojans, Spyware

NOTE: Long URLs may break into two lines in some mail readers.

Should this occur, please copy and paste the URL into your browser window.

************************************************************************

1. Trend Micro Updates - Pattern File & Scan Engine Updates

------------------------------------------------------------------------

PATTERN FILE: 2.404.00

http://trendnewsletter.rsc03.net/servlet/c...pgLlQgLlQgFV2VS

SCAN ENGINE: 7.500

http://trendnewsletter.rsc03.net/servlet/c...pgLlQgLlQgFV2VT

2. Locked Up – SYMBOS_LOCKNUT.A (Low Risk)

------------------------------------------------------------------------

SYMBOS_LOCKNUT.A is memory-resident malware that infects mobile devices

running

Symbian 7.0s Operating System, but does not propagate. It uses a

vulnerability

in Symbian OS v7.0s to cause a system process crash which locks the

mobile device.

It drops several files and folders in the C: directory of the phone, which

disable

several special buttons of the phone, leaving only the kepyad buttons

enabled. It

also infects mobile devices running Symbian OS v6.1 and v7.0 but fails

to cause the system to crash.

This malware usually arrives as an installation file with the following

file names:

Patch_v1.sis

Patch.sis

Upon installation, this malware drops the following files and folders in

the C:

directory of the phone:

system\apps\gavno\gavno.app

system\apps\gavno\gavno.rsc

system\apps\gavno\gavno_caption.rsc

It also drops a copy of itself as PATCH.SIS in the C: directory of the

phone. These

files are specially crafted to disable most of the special buttons of the

phone,

leaving only the keypad buttons enabled. It can also infect mobile

devices running

Symbian OS v6.1 and v7.0 but fails to cause the system to crash.

You may download Trend Micro's SYMBOS_LOCKNUT Clean Tool to a memory card

with an

uninfected device:

http://trendnewsletter.rsc03.net/servlet/c...pgLlQgLlQgFV2VU

SYMBOS_LOCKNUT.A is detected and cleaned by Trend Micro pattern file

#2.389.02 and

above. For additional information about SYMBOS_LOCKNUT.A please

visit:

http://trendnewsletter.rsc03.net/servlet/c...pgLlQgLlQgFV2VW

You may learn more about Trend Micro Mobile Security at:

http://trendnewsletter.rsc03.net/servlet/c...pgLlQgLlQgFV2VY

3. Top 10 Most Prevalent Global Malware

(from February 4 to February 10, 2005)

------------------------------------------------------------------------

1. WORM_NETSKY.P

2. HTML_NETSKY.P

3. WORM_SDBOT.APA

4. ADW_APROPOS.51

5. JAVA_BYTEVER.A

6. WORM_NETSKY.D

7. SPYW_GATOR.B

8. SPYW_GATOR.D

9. SPYW_GATOR.C

10. WORM_BAGLE.AZ

4. Learn the Basics of Malware and How it Affects You: Phishing,

Trojans, & Spyware

------------------------------------------------------------------------

Phishing. Trojans. Spyware. Worried about the threat of a computer

attack, but confused

about the terms? View this fun multimedia presentation for an introductory

overview of

some of the many types of malware and how they can affect you.

View the Malware Demo:

http://trendnewsletter.rsc03.net/servlet/c...pgLlQgLlQgFV2VA

********************************************************************************

***

______________________________________________________________________

This message was sent by Trend Micro's Newsletters Editor using Responsys

Interact .

To unsubscribe from Trend Micro's Newsletters Editor:

http://trendnewsletter.rsc03.net/servlet/o...RFpgLmDgLmDgSE0

To update your subscription preference, or to change your email address:

http://trendnewsletter.rsc03.net/servlet/w...kNlyLihkm_V_UUH

To view our permission marketing policy:

http://www.rsvp0.net

Copyright 1989-2004 Trend Micro, Inc. All rights reserved

Trend Micro, Inc., 10101 N. De Anza Blvd., Suite 200, Cupertino, CA

95014

[tg1911]

Thanks for the info, Marty.