If you get something like this from me, delete it without opening it.
-----Original Message-----
From: RSchue [mailto:RSchue8444@aol.com]
Sent: Monday, July 19, 2004 11:39 AM
To: Bj
Subject: Re:
>foto3 and MP3
=================================================
Because, see below: Jeers! Ray
TrendLabs declared a Medium Risk Virus Alert on July 19, 2004 at 12:30PM GMT –07:00 Daylight Savings Time to control the spread of WORM_BAGLE.AH. TrendLabs has received several infection reports indicating that this worm is spreading in the United States.
This worm utilizes SMTP (Simple Mail Transfer Protocol) to propagate. The email it sends out has varying email subjects, message body details and attachment file names.
The email it sends out has the following details:
From: <spoofed>
Subject: Re:
Message body: (any of the following)
• Animals
• foto3
• fotogalary
• fotoinfo
• Lovely animals
• Predators
• Screen
• The snake
Attachment: (any of the following)
• Cat
• Cool_MP3
• Dog
• Doll
• Fish
• Garry
• MP3
• Music_MP3
• New_MP3_Player
The attachment can have any of the following extension names:
• .com
• .cpl
• .exe
• .scr
• .zip
This worm also drops a copy of itself in folders with the text string, "shar", in its folder name. It uses a list of attractive file names for its dropped copies, leading other users to download a copy of this worm. It runs on Windows 95, 98, ME, NT, 2000, and XP.
TrendLabs will be releasing the following EPS deliverables:
TMCM Outbreak Prevention Policy 121
Official Pattern Release 943
Damage Cleanup Template 377
For more information on WORM_BAGLE.AH, you can visit our Web site at:
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_BAGLE.AH You can modify subscription settings for Trend Micro newsletters at:
http://www.trendmicro.com/subscriptions/default.asp ----------------------------------------------o0o----
CRITICAL PRODUCT UPDATE!
New Pattern File Numbering Format upgrade for Trend Micro products is REQUIRED by July 2004. Click
www.trendmicro.com/npf for details!
______________________________________________________________________
This message was sent by Trend Micro's Newsletters Editor using Responsys Interact (TM).
To unsubscribe from Trend Micro's Newsletters Editor:
http://trendnewsletter.rsc03.net/servlet/optout?mgLDWUUDUEklJoNLBXXXFHhsDJhtE0 To update your subscription preference, or to change your email address:
http://trendnewsletter.rsc03.net/se...sEklJoNLBXXXFHhsDJhtEhE3vyf_87.3de.26_7a To view our permission marketing policy:
http://www.rsvp0.net Trend Micro, Inc., 10101 N. De Anza Blvd., Suite 200, Cupertino, CA 95014
