http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=TROJ_NEWPIC.A

1. TREND MICRO UPDATES: Pattern File and Scan Engine Updates ------------------------------------------------------------------------ PATTERN FILE: 925 http://www.antivirus.com/download/pattern.asp SCAN ENGINE: 5.450 http://www.antivirus.com/download/engines/ 2. Propagating via MSN Messenger -- TROJ_NEWPIC.A ------------------------------------------------------------------------ TROJ_NEWPIC.A is a non-destructive worm written in Visual Basic 6.0. It propagates via MSN messenger by sending copies of itself to users in an infected user's contact list. This worm creates and drops a file, 1README.TXT and after infection appears in the Task Manager as a process "MsgSprd." Upon execution, it displays the following error message: " Cannot open file. May be corupted. Replace the file with a new one and try again. " For more information about TROJ_NEWPIC.A, visit Trend Micro at: http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=TROJ_NEWPIC.A TROJ_NEWPIC.A is detected by Trend Micro pattern file #924.

-- Anonymous, August 20, 2001