Dear Trend Micro customer,

As of April 26, 2004, 11:22 AM (PST), TrendLabs has declared a MEDIUM Risk Virus Alert to control the spread of WORM_BAGLE.X. TrendLabs has received several infection reports indicating that this malware is spreading in the US and Europe.

This memory-resident worm propagates via email and network shares. The email it sends has varying subjects and attachment file names. It drops copies of itself using specific file names in folders that contain the string "shar" in their folder names. It also terminates several antivirus and security programs. It runs on Windows 95, 98, ME, NT, 2000 and XP.

TrendLabs will be releasing the following EPS deliverables:

TMCM Outbreak Prevention Policy 107 Official Pattern Release 869 Damage Cleanup Template (DCT) 325

For more information on WORM_BAGLE.X, you can visit our Web site at:

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_BAGLE.X

You can modify subscription settings for Trend Micro newsletters at:

http://www.trendmicro.com/subscriptions/default.asp

-- SAR01 (busy@pc.com), April 26, 2004