********************************************************************** ** ** ** What's New in the NAV Virus Definitions Files WHATSNEW.TXT ** ** ** ** Symantec AntiVirus Research Center (SARC) July 18, 2001 ** ** ** ********************************************************************** This document contains the following topics: * Virus Alerts * New Technologies * Changes Incorporated Into This Update * Enabling Scanning Features * Additional Information ********************************************************************** ** Virus Alerts ** ********************************************************************** The ten most commonly reported viruses, worldwide: 1 W95.Hybris.worm 2 W95.MTX 3 Wscript.KakWorm 4 W32.HLLW.Bymer 5 W32.Magistr.24876@mm 6 W32.Badtrans.13312@mm 7 W32.Navidad.16896 8 Happy99.Worm 9 VBS.LoveLetter 10 W32.HLLW.Qaz ********************************************************************** ** New Technologies ** ********************************************************************** DATE Technologies Added ---- ------------------ 02/18/99 * Detection and repair of macro viruses in Word and Excel 2000 documents. 05/15/99 * Added repair for PowerPoint viruses. * Improved heuristics to detect more WORD 97 related viruses. 06/10/99 * Menu repair technology for WORD macro viruses that change command bar customizations in NORMAL.DOT. 07/12/99 * Added support for scanning of Ichitaro 8/9 documents. (Ichitaro is a Japanese word processing program). 08/19/99 * Added detection and repair for embedded documents inside PowerPoint 97. 11/22/99 * Added detection and repair for Trojans embedded in OLE files, such as Windows scrap files and MS Office documents. * Added detection for viruses which infect Microsoft Project documents (P98M.Corner.A, for example). 02/10/00 * Added support for scanning of UNIX executables. * Added detection for infected Visio documents. 12/18/00 * Added heuristics for for 32-bit Windows viruses. * Added a script scanner which increases our capabilities for detecting script based threats. ********************************************************************** ** Changes Incorporated Into This Virus Definitions Update ** ********************************************************************** DATE ---- New virus definitions (sorted by Virus Name): Virus Name Infection Type Date added ---------- -------------- ---------- AOL.PWSteal.86016 File infector 07/02/01 AOL.PWSteal.86016 File infector 07/05/01 BAT.Bacteria File infector 07/05/01 BAT.Buffy File infector 07/05/01 BAT.Butt.gen File infector 07/05/01 BAT.Cati File infector 07/06/01 BAT.Crazy File infector 07/05/01 BAT.Deadbeat File infector 07/09/01 BAT.Deadbeat File infector 07/09/01 BAT.Ebreja File infector 07/09/01 BAT.Ebreja File infector 07/09/01 BAT.Emma File infector 07/05/01 BAT.ForDo.gen File infector 07/09/01 BAT.HLW17892 File infector 07/05/01 BAT.Harl File infector 07/05/01 BAT.Hellf File infector 07/05/01 BAT.Hokum.165 File infector 07/05/01 BAT.Jany File infector 07/06/01 BAT.Jany.vbs File infector 07/06/01 BAT.Kirdik File infector 07/05/01 BAT.Larma File infector 07/09/01 BAT.Larma File infector 07/09/01 BAT.Lys File infector 07/09/01 BAT.Lys File infector 07/09/01 BAT.Malk File infector 07/05/01 BAT.Mf File infector 07/05/01 BAT.Odious.34 File infector 07/06/01 BAT.Penfold File infector 07/05/01 BAT.Pikachu File infector 07/09/01 BAT.Pikachu File infector 07/09/01 BAT.Psycho File infector 07/09/01 BAT.Psycho File infector 07/09/01 BAT.QuickFormat File infector 07/05/01 BAT.Rahiworm File infector 07/05/01 BAT.Silly.447 File infector 07/05/01 BAT.Silly.447 File infector 07/05/01 BAT.Simple.543 File infector 07/09/01 BAT.Tenej File infector 07/05/01 BAT.Trot File infector 07/05/01 Backdoor.Bionet.40a File infector 07/05/01 Backdoor.Darkirc File infector 07/12/01 Backdoor.Trojan.dr File infector 07/09/01 Bat.BVCK.gen File infector 07/09/01 Bat.DoubleAt File infector 07/12/01 Bat.FAGE.1480 File infector 07/13/01 Bat.Fakedrive.273 File infector 07/17/01 Bat.Hexvirus.1441 File infector 07/16/01 Bat.Invade File infector 07/09/01 Bat.Invade File infector 07/09/01 Bat.PG94.3964 File infector 07/16/01 Bat.Root.gen File infector 07/12/01 Bat.Scrambler File infector 07/12/01 Bat.Septic File infector 07/12/01 Bat.SillyB.gen File infector 07/12/01 Bat.Steel File infector 07/12/01 Bat.Xop.gen File infector 07/12/01 HLLP.Sosi.vbs@mm File infector 07/16/01 HLLP.Zielona.7300.dr File infector 07/05/01 HTML.Reality.B File infector 07/10/01 IRC.Acnu.Worm File infector 07/18/01 JS.KakWorm.H File infector 07/05/01 JS.KakWorm.H File infector 07/05/01 JS.KakWorm.Z File infector 07/12/01 JVS.Sentinel File infector 07/18/01 Linux.Eriz.Int File infector 07/17/01 Perl.Abuser File infector 07/18/01 Perl.Tima File infector 07/18/01 Perl.WSFTexp File infector 07/18/01 Pif.Phager File infector 07/18/01 Pif.Worm.gen File infector 07/18/01 REG.Zox File infector 07/18/01 Tcp.407 File infector 07/13/01 Trojan.Angela File infector 07/05/01 Trojan.Assault.10 File infector 07/18/01 Trojan.Bat.AntiDN File infector 07/09/01 Trojan.Bat.Autorun File infector 07/05/01 Trojan.Bat.BatKiller File infector 07/09/01 Trojan.Bat.BatKiller File infector 07/09/01 Trojan.Bat.DelFiles File infector 07/09/01 Trojan.Bat.DelFiles File infector 07/09/01 Trojan.Bat.DelFolder File infector 07/09/01 Trojan.Bat.Delauto File infector 07/05/01 Trojan.Bat.Delini.192 File infector 07/05/01 Trojan.Bat.Delsys File infector 07/05/01 Trojan.Bat.Deltree File infector 07/05/01 Trojan.Bat.DirMaker File infector 07/09/01 Trojan.Bat.FakeAV.A File infector 07/05/01 Trojan.Bat.FakeAV.B File infector 07/05/01 Trojan.Bat.HDFill File infector 07/09/01 Trojan.Bat.HDFill File infector 07/09/01 Trojan.Bat.Hardhead File infector 07/05/01 Trojan.Bat.Loop File infector 07/09/01 Trojan.Bat.NTHack File infector 07/06/01 Trojan.Bat.NTHack.vbs File infector 07/06/01 Trojan.Bat.Phat File infector 07/06/01 Trojan.Billrus.Texto File infector 07/02/01 Trojan.Billrus.Texto File infector 07/16/01 Trojan.Click.14 File infector 07/05/01 Trojan.INF.DelBios File infector 07/18/01 Trojan.IRC.Orifice File infector 07/18/01 Trojan.JS.Delsys File infector 07/18/01 Trojan.MiniComm.Dr File infector 07/18/01 Trojan.REG.System File infector 07/18/01 Trojan.Unix.Capdrop File infector 07/17/01 Trojan.VBS.BinHex File infector 07/17/01 Trojan.VBS.FWSV File infector 07/17/01 Trojan.VBS.Harvest File infector 07/17/01 Trojan.VBS.PWStroy File infector 07/12/01 Trojan.VBS.Wordex File infector 07/18/01 Trojan.W97M.Edrin File infector 07/17/01 Trojan.W97M.Green File infector 07/17/01 VBS.Allfree@mm File infector 07/18/01 VBS.Angela@mm File infector 07/05/01 VBS.Baracu@mm File infector 07/17/01 VBS.Blank.A File infector 07/12/01 VBS.Cable File infector 07/18/01 VBS.Cubby.Worm File infector 07/10/01 VBS.Davinia File infector 07/02/01 VBS.Davinia File infector 07/05/01 VBS.Devious File infector 07/18/01 VBS.Entice.B File infector 07/10/01 VBS.Eva.A@mm File infector 07/12/01 VBS.FS File infector 07/17/01 VBS.Fakedrive@mm File infector 07/17/01 VBS.First File infector 07/16/01 VBS.Folder File infector 07/18/01 VBS.JSPV File infector 07/17/01 VBS.Jethro File infector 07/02/01 VBS.Jethro File infector 07/05/01 VBS.Ketip.C@m File infector 07/05/01 VBS.Lize.A@mm File infector 07/16/01 VBS.LoveLetter.CL@mm File infector 07/18/01 VBS.LoveLetter.CQ File infector 07/05/01 VBS.Loveletter.ini File infector 07/17/01 VBS.Manos@mm File infector 07/17/01 VBS.Mill.G File infector 07/17/01 VBS.Monik File infector 07/18/01 VBS.SChild File infector 07/18/01 VBS.Script.intd File infector 07/18/01 VBS.Sock File infector 07/18/01 VBS.Sorry.C.Int File infector 07/16/01 VBS.Stages.B@mm File infector 07/17/01 VBS.VBSWG.N File infector 07/16/01 VBS.Vanina File infector 07/18/01 VBS.WSHV.Kit File infector 07/17/01 VBS.WTVSig File infector 07/18/01 VBS.Weather@mm File infector 07/06/01 VBS.Xanax@mm File infector 07/17/01 VBS.Yang@mm File infector 07/17/01 VBS.Younga File infector 07/06/01 W32.Alma File infector 07/02/01 W32.Alma File infector 07/05/01 W32.Antiqfx.C.worm File infector 07/13/01 W32.Bedtime.2304 File infector 07/02/01 W32.Efortune.28672@mm File infector 07/09/01 W32.Eliz.Worm File infector 07/09/01 W32.Eliz.Worm File infector 07/09/01 W32.Fog File infector 07/02/01 W32.Fog File infector 07/05/01 W32.Glyn File infector 07/02/01 W32.Glyn File infector 07/05/01 W32.HLLC.Abessive File infector 07/10/01 W32.HLLO.Videoinf File infector 07/18/01 W32.HLLP.Conteo File infector 07/02/01 W32.HLLP.Conteo File infector 07/05/01 W32.HLLW.Boomer File infector 07/02/01 W32.HLLW.Boomer File infector 07/05/01 W32.Jethro File infector 07/02/01 W32.Jethro File infector 07/05/01 W32.Ketip.Intd File infector 07/05/01 W32.Ketip.Intd File infector 07/05/01 W32.Lad.1916 File infector 07/02/01 W32.Lad.1916 File infector 07/05/01 W32.Leave.B.Worm File infector 07/09/01 W32.Leave.Worm.gen File infector 07/16/01 W32.Malot.Int@mm File infector 07/10/01 W32.Malot@mm File infector 07/10/01 W32.Mineup.Worm File infector 07/05/01 W32.Naver.Worm@mm File infector 07/05/01 W32.Peana File infector 07/02/01 W32.Peana File infector 07/05/01 W32.Pet_Tick.E File infector 07/13/01 W32.QDel File infector 07/05/01 W32.Revel.Worm@mm File infector 07/06/01 W32.Seppuku.9728 File infector 07/02/01 W32.Seppuku.9728 File infector 07/05/01 W32.Sircam.Worm@mm File infector 07/17/01 W32.Sofunny File infector 07/09/01 W32.Sofunny File infector 07/09/01 W32.Vampa File infector 07/02/01 W32.Vampa File infector 07/05/01 W95.Argos.310 File infector 07/02/01 W95.Argos.310 File infector 07/05/01 W95.Pet_Tick.E@mm File infector 07/17/01 W95.Wormfix.Worm@mm File infector 07/02/01 W97M.Antimarc.B File infector 07/10/01 W97M.Automat.AFR File infector 07/05/01 W97M.Binus.A File infector 07/17/01 W97M.Cive File infector 07/16/01 W97M.Claud.Gen File infector 07/09/01 W97M.Dest.gen File infector 07/17/01 W97M.Drewet.A File infector 07/13/01 W97M.Ethan.DX File infector 07/16/01 W97M.FS.gen File infector 07/16/01 W97M.HMVC File infector 07/02/01 W97M.HMVC File infector 07/05/01 W97M.Iseng.Gen File infector 07/05/01 W97M.Jethro File infector 07/02/01 W97M.Jethro File infector 07/05/01 W97M.Lawn.vbs File infector 07/18/01 W97M.Marker.BD.Gen File infector 07/05/01 W97M.Marker.BD.Gen File infector 07/05/01 W97M.Marmot File infector 07/16/01 W97M.Metys.N File infector 07/05/01 W97M.Metys.gen File infector 07/02/01 W97M.Murke.D File infector 07/17/01 W97M.Nid File infector 07/17/01 W97M.Odious.F File infector 07/06/01 W97M.Opey.I File infector 07/09/01 W97M.Opey.U File infector 07/18/01 W97M.Opey.X.gen File infector 07/17/01 W97M.Pain File infector 07/16/01 W97M.Shore.J File infector 07/17/01 W97M.Smac.Gen File infector 07/02/01 W97M.TTT.A File infector 07/18/01 W97M.Tester.A File infector 07/18/01 W97M.Three.A File infector 07/02/01 W97M.Three.A File infector 07/05/01 W97M.Thus.CT File infector 07/17/01 W97M.Thus.EQ.gen File infector 07/09/01 W97M.Thus.ER File infector 07/05/01 W97M.Thus.EY File infector 07/17/01 W97M.Valeria.A File infector 07/16/01 W97M.Valeria.B File infector 07/09/01 W97M.Zeitung.A File infector 07/12/01 WScript.Kakworm.I File infector 07/16/01 Win.HLLO.Zweistei File infector 07/02/01 Win.HLLO.Zweistei File infector 07/05/01 X97M.Disaster File infector 07/13/01 X97M.Jal.A File infector 07/05/01 X97M.Jal.gen File infector 07/02/01 X97M.Laroux.NT File infector 07/16/01 X97M.Neg.gen File infector 07/16/01 X97M.Tester.A File infector 07/12/01 X97M.VCX.gen File infector 07/02/01 X97M.Xif.B File infector 07/17/01 X97M.Yawn.gen File infector 07/02/01 XM.Yawn.gen File infector 07/02/01 XM.Yawn.gen File infector 07/05/01 New virus definitions (sorted by Date added): Virus Name Infection Type Date added ---------- -------------- ---------- IRC.Acnu.Worm File infector 07/18/01 JVS.Sentinel File infector 07/18/01 Perl.Abuser File infector 07/18/01 Perl.Tima File infector 07/18/01 Perl.WSFTexp File infector 07/18/01 Pif.Phager File infector 07/18/01 Pif.Worm.gen File infector 07/18/01 REG.Zox File infector 07/18/01 Trojan.Assault.10 File infector 07/18/01 Trojan.INF.DelBios File infector 07/18/01 Trojan.IRC.Orifice File infector 07/18/01 Trojan.JS.Delsys File infector 07/18/01 Trojan.MiniComm.Dr File infector 07/18/01 Trojan.REG.System File infector 07/18/01 Trojan.VBS.Wordex File infector 07/18/01 VBS.Allfree@mm File infector 07/18/01 VBS.Cable File infector 07/18/01 VBS.Devious File infector 07/18/01 VBS.Folder File infector 07/18/01 VBS.LoveLetter.CL@mm File infector 07/18/01 VBS.Monik File infector 07/18/01 VBS.SChild File infector 07/18/01 VBS.Script.intd File infector 07/18/01 VBS.Sock File infector 07/18/01 VBS.Vanina File infector 07/18/01 VBS.WTVSig File infector 07/18/01 W32.HLLO.Videoinf File infector 07/18/01 W97M.Lawn.vbs File infector 07/18/01 W97M.Opey.U File infector 07/18/01 W97M.Tester.A File infector 07/18/01 W97M.TTT.A File infector 07/18/01 Trojan.VBS.BinHex File infector 07/17/01 Trojan.VBS.FWSV File infector 07/17/01 Trojan.W97M.Edrin File infector 07/17/01 Trojan.W97M.Green File infector 07/17/01 VBS.Baracu@mm File infector 07/17/01 VBS.FS File infector 07/17/01 VBS.JSPV File infector 07/17/01 VBS.Loveletter.ini File infector 07/17/01 VBS.Manos@mm File infector 07/17/01 VBS.WSHV.Kit File infector 07/17/01 VBS.Xanax@mm File infector 07/17/01 W32.Sircam.Worm@mm File infector 07/17/01 W95.Pet_Tick.E@mm File infector 07/17/01 W97M.Binus.A File infector 07/17/01 W97M.Dest.gen File infector 07/17/01 W97M.Murke.D File infector 07/17/01 W97M.Nid File infector 07/17/01 W97M.Opey.X.gen File infector 07/17/01 X97M.Xif.B File infector 07/17/01 Bat.Fakedrive.273 File infector 07/17/01 Linux.Eriz.Int File infector 07/17/01 Trojan.Unix.Capdrop File infector 07/17/01 Trojan.VBS.Harvest File infector 07/17/01 VBS.Fakedrive@mm File infector 07/17/01 VBS.Mill.G File infector 07/17/01 VBS.Stages.B@mm File infector 07/17/01 VBS.Yang@mm File infector 07/17/01 W97M.Shore.J File infector 07/17/01 W97M.Thus.CT File infector 07/17/01 W97M.Thus.EY File infector 07/17/01 Bat.Hexvirus.1441 File infector 07/16/01 Bat.PG94.3964 File infector 07/16/01 HLLP.Sosi.vbs@mm File infector 07/16/01 Trojan.Billrus.Texto File infector 07/16/01 VBS.First File infector 07/16/01 VBS.Lize.A@mm File infector 07/16/01 VBS.Sorry.C.Int File infector 07/16/01 VBS.VBSWG.N File infector 07/16/01 W32.Leave.Worm.gen File infector 07/16/01 W97M.Cive File infector 07/16/01 W97M.Ethan.DX File infector 07/16/01 W97M.FS.gen File infector 07/16/01 W97M.Marmot File infector 07/16/01 W97M.Pain File infector 07/16/01 W97M.Valeria.A File infector 07/16/01 WScript.Kakworm.I File infector 07/16/01 X97M.Laroux.NT File infector 07/16/01 X97M.Neg.gen File infector 07/16/01 Bat.FAGE.1480 File infector 07/13/01 Tcp.407 File infector 07/13/01 W32.Antiqfx.C.worm File infector 07/13/01 W32.Pet_Tick.E File infector 07/13/01 W97M.Drewet.A File infector 07/13/01 X97M.Disaster File infector 07/13/01 Backdoor.Darkirc File infector 07/12/01 Bat.DoubleAt File infector 07/12/01 Bat.Root.gen File infector 07/12/01 Bat.Scrambler File infector 07/12/01 Bat.Septic File infector 07/12/01 Bat.SillyB.gen File infector 07/12/01 Bat.Steel File infector 07/12/01 Bat.Xop.gen File infector 07/12/01 JS.KakWorm.Z File infector 07/12/01 Trojan.VBS.PWStroy File infector 07/12/01 VBS.Blank.A File infector 07/12/01 VBS.Eva.A@mm File infector 07/12/01 W97M.Zeitung.A File infector 07/12/01 X97M.Tester.A File infector 07/12/01 HTML.Reality.B File infector 07/10/01 VBS.Cubby.Worm File infector 07/10/01 VBS.Entice.B File infector 07/10/01 W32.HLLC.Abessive File infector 07/10/01 W32.Malot.Int@mm File infector 07/10/01 W32.Malot@mm File infector 07/10/01 W97M.Antimarc.B File infector 07/10/01 BAT.Deadbeat File infector 07/09/01 BAT.Ebreja File infector 07/09/01 BAT.Larma File infector 07/09/01 BAT.Lys File infector 07/09/01 BAT.Pikachu File infector 07/09/01 BAT.Psycho File infector 07/09/01 Bat.Invade File infector 07/09/01 Trojan.Bat.BatKiller File infector 07/09/01 Trojan.Bat.DelFiles File infector 07/09/01 Trojan.Bat.HDFill File infector 07/09/01 W32.Eliz.Worm File infector 07/09/01 W32.Leave.B.Worm File infector 07/09/01 W32.Sofunny File infector 07/09/01 BAT.Deadbeat File infector 07/09/01 BAT.Ebreja File infector 07/09/01 BAT.Larma File infector 07/09/01 BAT.Lys File infector 07/09/01 BAT.Pikachu File infector 07/09/01 BAT.Psycho File infector 07/09/01 Bat.Invade File infector 07/09/01 Trojan.Bat.BatKiller File infector 07/09/01 Trojan.Bat.DelFiles File infector 07/09/01 Trojan.Bat.HDFill File infector 07/09/01 W32.Eliz.Worm File infector 07/09/01 W32.Sofunny File infector 07/09/01 BAT.ForDo.gen File infector 07/09/01 BAT.Simple.543 File infector 07/09/01 Backdoor.Trojan.dr File infector 07/09/01 Bat.BVCK.gen File infector 07/09/01 Trojan.Bat.AntiDN File infector 07/09/01 Trojan.Bat.DelFolder File infector 07/09/01 Trojan.Bat.DirMaker File infector 07/09/01 Trojan.Bat.Loop File infector 07/09/01 W32.Efortune.28672@mm File infector 07/09/01 W97M.Claud.Gen File infector 07/09/01 W97M.Opey.I File infector 07/09/01 W97M.Thus.EQ.gen File infector 07/09/01 W97M.Valeria.B File infector 07/09/01 BAT.Cati File infector 07/06/01 BAT.Jany File infector 07/06/01 BAT.Jany.vbs File infector 07/06/01 BAT.Odious.34 File infector 07/06/01 Trojan.Bat.NTHack File infector 07/06/01 Trojan.Bat.NTHack.vbs File infector 07/06/01 Trojan.Bat.Phat File infector 07/06/01 VBS.Weather@mm File infector 07/06/01 VBS.Younga File infector 07/06/01 W32.Revel.Worm@mm File infector 07/06/01 W97M.Odious.F File infector 07/06/01 BAT.Butt.gen File infector 07/05/01 BAT.Kirdik File infector 07/05/01 BAT.Mf File infector 07/05/01 BAT.Silly.447 File infector 07/05/01 JS.KakWorm.H File infector 07/05/01 Trojan.Angela File infector 07/05/01 Trojan.Bat.Autorun File infector 07/05/01 Trojan.Bat.Delauto File infector 07/05/01 Trojan.Bat.Delini.192 File infector 07/05/01 Trojan.Bat.Delsys File infector 07/05/01 Trojan.Bat.Deltree File infector 07/05/01 Trojan.Bat.FakeAV.A File infector 07/05/01 Trojan.Bat.FakeAV.B File infector 07/05/01 Trojan.Bat.Hardhead File infector 07/05/01 VBS.Angela@mm File infector 07/05/01 W32.Ketip.Intd File infector 07/05/01 W32.Mineup.Worm File infector 07/05/01 W97M.Marker.BD.Gen File infector 07/05/01 W97M.Metys.N File infector 07/05/01 X97M.Jal.A File infector 07/05/01 AOL.PWSteal.86016 File infector 07/05/01 BAT.Bacteria File infector 07/05/01 BAT.Buffy File infector 07/05/01 BAT.Crazy File infector 07/05/01 BAT.Emma File infector 07/05/01 BAT.HLW17892 File infector 07/05/01 BAT.Harl File infector 07/05/01 BAT.Hellf File infector 07/05/01 BAT.Hokum.165 File infector 07/05/01 BAT.Malk File infector 07/05/01 BAT.Penfold File infector 07/05/01 BAT.QuickFormat File infector 07/05/01 BAT.Rahiworm File infector 07/05/01 BAT.Silly.447 File infector 07/05/01 BAT.Tenej File infector 07/05/01 BAT.Trot File infector 07/05/01 Backdoor.Bionet.40a File infector 07/05/01 HLLP.Zielona.7300.dr File infector 07/05/01 JS.KakWorm.H File infector 07/05/01 Trojan.Click.14 File infector 07/05/01 VBS.Davinia File infector 07/05/01 VBS.Jethro File infector 07/05/01 VBS.Ketip.C@m File infector 07/05/01 W32.Alma File infector 07/05/01 W32.Fog File infector 07/05/01 W32.Glyn File infector 07/05/01 W32.HLLP.Conteo File infector 07/05/01 W32.HLLW.Boomer File infector 07/05/01 W32.Jethro File infector 07/05/01 W32.Ketip.Intd File infector 07/05/01 W32.Lad.1916 File infector 07/05/01 W32.Naver.Worm@mm File infector 07/05/01 W32.Peana File infector 07/05/01 W32.QDel File infector 07/05/01 W32.Seppuku.9728 File infector 07/05/01 W32.Vampa File infector 07/05/01 W95.Argos.310 File infector 07/05/01 W97M.Automat.AFR File infector 07/05/01 W97M.HMVC File infector 07/05/01 W97M.Iseng.Gen File infector 07/05/01 W97M.Jethro File infector 07/05/01 W97M.Marker.BD.Gen File infector 07/05/01 W97M.Three.A File infector 07/05/01 W97M.Thus.ER File infector 07/05/01 Win.HLLO.Zweistei File infector 07/05/01 XM.Yawn.gen File infector 07/05/01 VBS.LoveLetter.CQ File infector 07/05/01 AOL.PWSteal.86016 File infector 07/02/01 VBS.Davinia File infector 07/02/01 VBS.Jethro File infector 07/02/01 W32.Alma File infector 07/02/01 W32.Fog File infector 07/02/01 W32.Glyn File infector 07/02/01 W32.HLLP.Conteo File infector 07/02/01 W32.HLLW.Boomer File infector 07/02/01 W32.Jethro File infector 07/02/01 W32.Lad.1916 File infector 07/02/01 W32.Peana File infector 07/02/01 W32.Seppuku.9728 File infector 07/02/01 W32.Vampa File infector 07/02/01 W95.Argos.310 File infector 07/02/01 W97M.HMVC File infector 07/02/01 W97M.Jethro File infector 07/02/01 W97M.Three.A File infector 07/02/01 Win.HLLO.Zweistei File infector 07/02/01 XM.Yawn.gen File infector 07/02/01 Trojan.Billrus.Texto File infector 07/02/01 W32.Bedtime.2304 File infector 07/02/01 W95.Wormfix.Worm@mm File infector 07/02/01 W97M.Metys.gen File infector 07/02/01 W97M.Smac.Gen File infector 07/02/01 X97M.Jal.gen File infector 07/02/01 X97M.VCX.gen File infector 07/02/01 X97M.Yawn.gen File infector 07/02/01 Name Changes (sorted by Old Virus Name): Old Virus Name New Virus Name Date changed -------------- -------------- ------------ AOL.PWSteal.86016 to W95.SoFunny.Worm@mm 07/10/01 Albirro.1442 to I13.Albi.1442 06/14/01 BAT.Deadbeat to BAT.Deadbyte.gen 07/10/01 BAT.QuickFormat to Trojan.BAT.QuickFormat 07/09/01 Bloudhound.InsertForm to Bloodhound.InsertForm 06/05/01 Bloundhound.InsertForm to Bloudhound.InsertForm 06/01/01 DoS.Storm.Worm to W32.Storm.Worm 06/19/01 DoS.Storm.Worm(2) to W32.Storm.Worm(2) 06/19/01 IRC.Acoragil to IRC.Family.Gen 06/01/01 O97M.Compilation to O97M.Jerk.G 06/20/01 O97M.CyberNet.A to O97M.CyberNet.Gen 07/09/01 SubSeven.B to Backdoor.SubSeven.B 06/19/01 TMC to TMC.B (3) 06/07/01 Trojan.BAT.QuickFormat to Trojan.Bat.QuickFormat 07/12/01 VBS.Eva.A@mm to VBS.Merlin.B@mm 07/16/01 VBS.Copy@mm to VBS.Chism.A@mm 06/24/01 VBS.Devolve.A to VBS.TVKid.A 06/05/01 VBS.Ketip.A@mm to VBS.Pet_Tick.A@mm 07/17/01 VBS.Ketip.A@mm (2) to VBS.Pet_Tick.A@mm (2) 07/17/01 VBS.Ketip.A@mm.ini to VBS.Pet_Tick.A@mm.ini 07/17/01 VBS.Ketip.B@mm to VBS.Pet_Tick.B@mm 07/13/01 VBS.Ketip.C@m to VBS.Pet_Tick.C@m 07/13/01 VBS.Liong to VBS.Liong@mm 07/05/01 VBS.LoveLetter.CM@mm to VBS.LoveLetter.CN@mm 06/01/01 VBS.VBSWG.N to VBS.VBSWG.N@mm 07/17/01 VBS.Weather@mm to VBS.Repah.A@mm 07/09/01 W32.Bedtime.2304 to W32.APBot.Worm@mm 07/05/01 W32.Fiend.Worm to W32.Pet_Tick.B 07/13/01 W32.HLLP.Themb to Win.Winp 06/12/01 W32.Ketip.Intd to W32.Pet_Tick.Intd 07/13/01 W32.Magistr.int to W32.Magistr.corrupt 06/07/01 W32.Malot.Int to W32.Pet_Tick.G 07/13/01 W32.Malot.Int@mm to W32.Malot.Int 07/12/01 W32.Malot@mm to W32.Pet_Tick@mm 07/13/01 W32.Mimic to IRC.Mimic 06/15/01 W32.Mimic.dr(4) to Trojan.RunIRC 06/18/01 W32.Mimic.dr(5) to Trojan.RunIRC(1) 06/18/01 W32.Salut.Worm@mm to W32.Pet_Tick.A@mm 07/13/01 W95.BlueBalls.2049 to W95.BlueCorners.2049 06/24/01 W95.Buggy.Worm@mm to W95.Pet_Tick.C@mmv 07/13/01 W95.Weird.C to W32.Weird.C 07/16/01 W95.Weird.C.Backdoor to W32.Weird.C.Backdoor 07/16/01 W95.Wormfix.Worm@mm to W95.Pet_Tick.D@mm 07/13/01 W97M.AntiMarc.A to W97M.AntiMarc.A@mm 07/10/01 W97M.Blue to W97M.Shore.H 06/21/01 W97M.Bogor.A to W97M.Lulung.E 06/20/01 W97M.CandyFlip to W97M.LSD.A 06/20/01 W97M.Intended to W97M.Jishe.A 06/20/01 W97M.Ketip.Intd to W97M.Pet_Tick.Intd 07/13/01 W97M.Mxc.A to W97M.Bottra.A 06/20/01 Name Changes (sorted by Date changed): Old Virus Name New Virus Name Date changed -------------- -------------- ------------ VBS.Ketip.A@mm to VBS.Pet_Tick.A@mm 07/17/01 VBS.Ketip.A@mm (2) to VBS.Pet_Tick.A@mm (2) 07/17/01 VBS.Ketip.A@mm.ini to VBS.Pet_Tick.A@mm.ini 07/17/01 VBS.VBSWG.N to VBS.VBSWG.N@mm 07/17/01 VBS.Eva.A@mm to VBS.Merlin.B@mm 07/16/01 W95.Weird.C to W32.Weird.C 07/16/01 W95.Weird.C.Backdoor to W32.Weird.C.Backdoor 07/16/01 VBS.Ketip.B@mm to VBS.Pet_Tick.B@mm 07/13/01 VBS.Ketip.C@m to VBS.Pet_Tick.C@m 07/13/01 W32.Fiend.Worm to W32.Pet_Tick.B 07/13/01 W32.Ketip.Intd to W32.Pet_Tick.Intd 07/13/01 W32.Malot.Int to W32.Pet_Tick.G 07/13/01 W32.Malot@mm to W32.Pet_Tick@mm 07/13/01 W32.Salut.Worm@mm to W32.Pet_Tick.A@mm 07/13/01 W95.Buggy.Worm@mm to W95.Pet_Tick.C@mmv 07/13/01 W95.Wormfix.Worm@mm to W95.Pet_Tick.D@mm 07/13/01 W97M.Ketip.Intd to W97M.Pet_Tick.Intd 07/13/01 Trojan.BAT.QuickFormat to Trojan.Bat.QuickFormat 07/12/01 W32.Malot.Int@mm to W32.Malot.Int 07/12/01 AOL.PWSteal.86016 to W95.SoFunny.Worm@mm 07/10/01 BAT.Deadbeat to BAT.Deadbyte.gen 07/10/01 W97M.AntiMarc.A to W97M.AntiMarc.A@mm 07/10/01 BAT.QuickFormat to Trojan.BAT.QuickFormat 07/09/01 O97M.CyberNet.A to O97M.CyberNet.Gen 07/09/01 VBS.Weather@mm to VBS.Repah.A@mm 07/09/01 VBS.Liong to VBS.Liong@mm 07/05/01 W32.Bedtime.2304 to W32.APBot.Worm@mm 07/05/01 VBS.Copy@mm to VBS.Chism.A@mm 06/24/01 W95.BlueBalls.2049 to W95.BlueCorners.2049 06/24/01 W97M.Blue to W97M.Shore.H 06/21/01 O97M.Compilation to O97M.Jerk.G 06/20/01 W97M.Bogor.A to W97M.Lulung.E 06/20/01 W97M.CandyFlip to W97M.LSD.A 06/20/01 W97M.Intended to W97M.Jishe.A 06/20/01 W97M.Mxc.A to W97M.Bottra.A 06/20/01 DoS.Storm.Worm to W32.Storm.Worm 06/19/01 DoS.Storm.Worm(2) to W32.Storm.Worm(2) 06/19/01 SubSeven.B to Backdoor.SubSeven.B 06/19/01 W32.Mimic.dr(4) to Trojan.RunIRC 06/18/01 W32.Mimic.dr(5) to Trojan.RunIRC(1) 06/18/01 W32.Mimic to IRC.Mimic 06/15/01 Albirro.1442 to I13.Albi.1442 06/14/01 W32.HLLP.Themb to Win.Winp 06/12/01 TMC to TMC.B (3) 06/07/01 W32.Magistr.int to W32.Magistr.corrupt 06/07/01 Bloudhound.InsertForm to Bloodhound.InsertForm 06/05/01 VBS.Devolve.A to VBS.TVKid.A 06/05/01 VBS.LoveLetter.CM@mm to VBS.LoveLetter.CN@mm 06/01/01 Bloundhound.InsertForm to Bloudhound.InsertForm 06/01/01 IRC.Acoragil to IRC.Family.Gen 06/01/01 Deletions (sorted by Virus Name): Virus Name Infection Type Date removed ---------- -------------- ------------ A97M.Amg.A File infector 06/15/01 CLS.Win.Joke.34520(1) File infector 07/17/01 CLS.Win.Joke.34520(2) File infector 07/17/01 Invalid Certificate File infector 05/14/01 MtE.Groove (5) File infector 06/05/01 Trojan.Billrus.Texto File infector 07/13/01 Unlucky.2008 (2) File infector 06/11/01 Unlucky.2008 (3) File infector 06/11/01 W32.Bedtime.2304 File infector 07/02/01 W95.Mul.2012 File infector 05/31/01 W95.Smoker.Worm@mm File infector 07/12/01 Deletions (sorted by Date removed): Virus Name Infection Type Date removed ---------- -------------- ------------ CLS.Win.Joke.34520(1) File infector 07/17/01 CLS.Win.Joke.34520(2) File infector 07/17/01 Trojan.Billrus.Texto File infector 07/13/01 W95.Smoker.Worm@mm File infector 07/12/01 W32.Bedtime.2304 File infector 07/02/01 A97M.Amg.A File infector 06/15/01 Unlucky.2008 (2) File infector 06/11/01 Unlucky.2008 (3) File infector 06/11/01 MtE.Groove (5) File infector 06/05/01 W95.Mul.2012 File infector 05/31/01 Invalid Certificate File infector 05/14/01 ********************************************************************** ** Enabling Scanning Features ** ********************************************************************** Several scanning features can be enabled through the use of an INF configuration file. For NAV for Windows 95/NT version 4.x and later, or NAV for OS/2, this configuration file should be called NAVEX15.INF and should be placed in the directory where NAV is installed (i.e., C:\Program Files\Norton AntiVirus). For NAV for Netware version 4.x, the file should be called NAVEX15.INF and should be placed in the directory where NAV 4.x is installed (i.e., sys:system\navnlm). For NAV for Windows 95/NT version 2.0, NAV 4.x for Windows 3.1/DOS, NAVIEG 1.x, or NAVFW 1.x, the file should be named NAVEX.INF and should be placed in the directory where NAV is installed (i.e., C:\NAV). If this configuration file does not exist, create one in the appropriate directory if you want to change the default settings. To enable a scanning feature for a particular component, one or more entries need to be added to the configuration file under the correct section. For each platform there is a corresponding section that is used in the INF file. Below is a table of section names and platforms. Section Name Platform ------------ -------- NAVW32 Windows 95/98/NT NAVAP Windows 95/98/NT Auto-Protect NAVDX DOS NAVNLM Netware NAVWIN Windows 3.1 NAVOS2 OS/2 NAVAIX AIX NAVSOL Solaris Entries are case insensitive. Below is a description of possible entries. 1. Files can be excluded from scans by the NAVEX engine. To exclude a specific file from the NAVEX engine scan, add an entry with the full path and file name. This is case insensitive. No wildcards are allowed. To exclude multiple files, add a separate entry for each file. To exclude a file, add an entry like the one below where is the full path and file name. ExcludeFile = 2. Files within a directory can be excluded from scans by the NAVEX engine. To exclude all files within a directory, add an entry with the full directory path. This is case insensitive. No wildcards are allowed. This does not exclude files located in subdirectories of the specified directory. To exclude multiple directories, add a separate entry for each directory. To exclude a directory, add an entry like the one below where is the full path. ExcludeDirectory = The following example of an INF configuration file excludes two files, NOSCAN.EXE and BIGFILE.DOC, from NAVEX scans for the Windows 95/98/NT scanner. It excludes the D:\PRIVATE directory from Windows 95/98/NT Auto-Protect. [NAVW32] ExcludeFile = C:\PROGRAM FILES\NOSCAN.EXE ExcludeFile = C:\TEMP\BIGFILE.DOC [NAVAP] ExcludeDirectory = D:\PRIVATE ********************************************************************** ** Additional Information ** ********************************************************************** Additional information regarding this virus definitions update can be found in UPDATE.TXT and TECHNOTE.TXT.