home *** CD-ROM | disk | FTP | other *** search
/ Freelog 29 / Freelog029.iso / Extra / Antivir / NavScan / 1124x86.exe / whatsnew.txt < prev    next >
Text File  |  2001-11-24  |  44KB  |  771 lines
  1. **********************************************************************
  2. **                                                                  **
  3. **  What's New in the NAV Virus Definitions Files      WHATSNEW.TXT **
  4. **                                                                  **
  5. **  Symantec Security Response                   November  24, 2001 **
  6. **                                                                  **
  7. **********************************************************************
  8. This document contains the following topics:
  9.  
  10.  * Virus Alerts
  11.  * New Technologies
  12.  * Changes Incorporated Into This Update
  13.  * Enabling Scanning Features
  14.  * Additional Information
  15.  
  16. **********************************************************************
  17. ** Virus Alerts                                                     **
  18. **********************************************************************
  19. The ten most commonly reported viruses, worldwide:
  20.  
  21.     1  W95.Hybris.worm
  22.     2  W95.MTX
  23.     3  Wscript.KakWorm
  24.     4  W32.HLLW.Bymer
  25.     5  W32.Magistr.24876@mm
  26.     6  W32.Badtrans.13312@mm
  27.     7  W32.Navidad.16896
  28.     8  Happy99.Worm
  29.     9  VBS.LoveLetter
  30.    10  W32.HLLW.Qaz
  31.  
  32. **********************************************************************
  33. ** New Technologies                                                 **
  34. **********************************************************************
  35.  
  36. DATE         Technologies Added
  37. ----         ------------------
  38. 02/18/99   * Detection and repair of macro viruses in Word and Excel
  39.              2000 documents.
  40.  
  41. 05/15/99   * Added repair for PowerPoint viruses.
  42.            * Improved heuristics to detect more WORD 97 related
  43.              viruses.
  44.  
  45. 06/10/99   * Menu repair technology for WORD macro viruses that change
  46.              command bar customizations in NORMAL.DOT.
  47.  
  48. 07/12/99   * Added support for scanning of Ichitaro 8/9 documents.
  49.              (Ichitaro is a Japanese word processing program).
  50.  
  51. 08/19/99   * Added detection and repair for embedded documents inside
  52.              PowerPoint 97.
  53.  
  54. 11/22/99   * Added detection and repair for Trojans embedded in OLE
  55.              files, such as Windows scrap files and MS Office
  56.              documents.
  57.            * Added detection for viruses which infect Microsoft
  58.              Project documents (P98M.Corner.A, for example).
  59.  
  60. 02/10/00   * Added support for scanning of UNIX executables.
  61.            * Added detection for infected Visio documents.
  62.  
  63. 12/18/00   * Added heuristics for for 32-bit Windows viruses.
  64.            * Added a script scanner which increases our capabilities for 
  65.              detecting script based threats.
  66.  
  67. 08/02/01   * Engine Update 08/02/01
  68.            * All products that use the NAVEX 1.5 architecture 
  69.              (in other words, most major Symantec products released over 
  70.              the last 3 - 4 years) will receive the new functionality.
  71.            * This enhanced technology provides improved script scanning 
  72.              as well as more proactive detection of unknown script-based 
  73.              threats. 
  74.  
  75.              
  76.  
  77. **********************************************************************
  78. ** Changes Incorporated Into This Virus Definitions Update          **
  79. **********************************************************************
  80.  
  81. DATE
  82. ----
  83.  
  84.  
  85. New virus definitions (sorted by Virus Name):
  86.  
  87.         Virus Name                Infection Type          Date added
  88.         ----------                --------------          ----------
  89.         AWVCK.kit.gen             File infector            11/06/01
  90.         Altx.2663                 File infector            11/06/01
  91.         Altx.2675                 File infector            11/06/01
  92.         Altx.2748                 File infector            11/06/01
  93.         Altx.2889                 File infector            11/06/01
  94.         Altx.Trojan               Boot infector            11/09/01
  95.         Archiver.1555             File infector            11/02/01
  96.         BGHT.gen                  File infector            11/08/01
  97.         Backdoor.Freddy           File infector            11/16/01
  98.         Backdoor.Nerte            File infector            11/09/01
  99.         Backdoor.Uncap            File infector            11/24/01
  100.         Bat.Buffer                File infector            11/06/01
  101.         Bat.Bvir.2600             File infector            11/09/01
  102.         Bat.Falken.B              File infector            11/06/01
  103.         Bat.Funtime               File infector            11/06/01
  104.         Bat.Godog.Trojan          File infector            11/06/01
  105.         Bat.StartV                File infector            11/06/01
  106.         Bat.Tomb.Trojan           File infector            11/06/01
  107.         Beda.gen                  File infector            11/07/01
  108.         Bin.Auto.ARN              File infector            11/07/01
  109.         Bloodhound.JS.1           File infector            11/14/01
  110.         Bloodhound.JS.2           File infector            11/14/01
  111.         Bloodhound.JS.3           File infector            11/14/01
  112.         Bloodhound.VBS.3          File infector            11/14/01
  113.         Bloodhound.VBS.4          File infector            11/14/01
  114.         Bloodhound.VBS.5          File infector            11/14/01
  115.         Bloodhound.W32.Simple     File infector            11/09/01
  116.         Bloodhound.W32.VBWORM     File infector            11/09/01
  117.         Bloodhound.W32.WSWORM     File infector            11/09/01
  118.         BlueSky.1360              File infector            11/09/01
  119.         CW.219                    File infector            11/08/01
  120.         CW.317                    File infector            11/08/01
  121.         CYB.195                   File infector            11/09/01
  122.         Champaigne.749            File infector            11/02/01
  123.         Crec.7000                 File infector            11/11/01
  124.         Cri.Cri.5595.dr           File infector            11/09/01
  125.         Dead.328                  File infector            11/08/01
  126.         Girl.Worm                 File infector            11/16/01
  127.         Gob.381                   File infector            11/08/01
  128.         HDBreak.Trojan            Boot infector            11/02/01
  129.         HLLC.8001.E               File infector            11/09/01
  130.         HLLO.Picked.4505          File infector            11/20/01
  131.         HackTool.AddrSteal        File infector            11/20/01
  132.         IRC.Antas                 File infector            11/06/01
  133.         IRC.Jeepwarz              File infector            11/05/01
  134.         IRC.Jerret                File infector            11/05/01
  135.         IRC.Melanie               File infector            11/06/01
  136.         IRC.Pron                  File infector            11/06/01
  137.         IRC.Toolame               File infector            11/05/01
  138.         IRC.Unable                File infector            11/05/01
  139.         IRC.Wonder                File infector            11/05/01
  140.         Insert.282                File infector            11/11/01
  141.         JS.Xiro.Trojan            File infector            11/08/01
  142.         JS.Yama@m                 File infector            11/15/01
  143.         June8.1898                File infector            11/08/01
  144.         Keyb.gen                  File infector            11/07/01
  145.         Koths.2962                File infector            11/09/01
  146.         Mpoc.804                  File infector            11/02/01
  147.         O97M.Ethan.A              File infector            11/24/01
  148.         PS-MPC.Abraxas.1200       File infector            11/02/01
  149.         Perl.Atvi@mm              File infector            11/07/01
  150.         Relax.884                 File infector            11/01/01
  151.         SH.Sizer                  File infector            11/13/01
  152.         SME.Demo                  File infector            11/01/01
  153.         SillyC.183.b              File infector            11/06/01
  154.         Sillyc.gen                File infector            11/08/01
  155.         Slowly.gen                File infector            11/09/01
  156.         Soldier.747               File infector            11/08/01
  157.         Soldier.781.B             File infector            11/08/01
  158.         TBG.951                   File infector            11/09/01
  159.         TsuPNG.gen                File infector            11/11/01
  160.         Txtdj.gen                 File infector            11/08/01
  161.         V.272                     File infector            11/02/01
  162.         V.323                     File infector            11/08/01
  163.         V.454                     File infector            11/09/01        
  164.         VBS.Bici (demo)           File infector            11/05/01
  165.         VBS.Loveletter.BL(2)      File infector            11/08/01
  166.         VBS.Magique.Int           File infector            11/09/01
  167.         VBS.Paukor.B@mm           File infector            11/08/01
  168.         VBS.Protest               File infector            11/07/01
  169.         VBS.Snav                  File infector            11/20/01
  170.         VBS.Zeta.A@mm             File infector            11/01/01
  171.         VCL.Jerk.294              File infector            11/09/01
  172.         Vofca.277                 File infector            11/09/01
  173.         W32.Antites               File infector            11/11/01
  174.         W32.Badtrans.B@mm         File infector            11/24/01
  175.         W32.Bumran                File infector            11/15/01
  176.         W32.Cblade.Worm           File infector            11/24/01
  177.         W32.Ciosor                File infector            11/07/01
  178.         W32.Datus                 File infector            11/24/01
  179.         W32.Delalot.Trojan        File infector            11/15/01
  180.         W32.Dexes                 File infector            11/15/01
  181.         W32.Drea.Irc              File infector            11/07/01
  182.         W32.Elem.Trojan           File infector            11/24/01
  183.         W32.Finaldo.B.enc         File infector            11/07/01
  184.         W32.Finaldo.B.enc(1)      File infector            11/07/01
  185.         W32.Finaldo.B@mm          File infector            11/07/01
  186.         W32.Finaldo.B@mm(html)    File infector            11/13/01
  187.         W32.Finaldo.dll           File infector            11/07/01
  188.         W32.Funsoul@mm            File infector            11/11/01
  189.         W32.HLLW.Bloack           File infector            11/07/01
  190.         W32.Klez.B@mm             File infector            11/08/01
  191.         W32.Klez.gen@mm           File infector            11/11/01
  192.         W32.Nimda.E@mm (dr)       File infector            11/01/01
  193.         W32.Nimda.enc(dr)         File infector            11/09/01
  194.         W32.Paukor.B@mm           File infector            11/07/01
  195.         W32.Redal                 File infector            11/02/01
  196.         W32.SST@mm (dr)           File infector            11/01/01
  197.         W32.Silwarr               File infector            11/07/01
  198.         W32.Small.gen             File infector            11/07/01
  199.         W32.Surse.Mirc            File infector            11/07/01
  200.         W32.Usen                  File infector            11/24/01
  201.         W32.Viled@mm              File infector            11/11/01
  202.         W32.Yerg                  File infector            11/06/01
  203.         W95.Epip@m                File infector            11/07/01
  204.         W95.Opa.1103              File infector            11/08/01
  205.         W95.Rufoll                File infector            11/20/01
  206.         W97M.Brando               File infector            11/20/01
  207.         W97M.Chack.BS             File infector            11/09/01
  208.         W97M.Coldape.B            File infector            11/19/01
  209.         W97M.Death.C              File infector            11/13/01
  210.         W97M.Hope.AE              File infector            11/11/01
  211.         W97M.Jedi.O               File infector            11/08/01
  212.         W97M.Kiek.A               File infector            11/08/01
  213.         W97M.Lucia.A@mm           File infector            11/08/01
  214.         W97M.Luck                 File infector            11/08/01
  215.         W97M.Marfan.C             File infector            11/13/01
  216.         W97M.Mesmoth.A            File infector            11/08/01
  217.         W97M.Mike                 File infector            11/09/01
  218.         W97M.Mxfile.K             File infector            11/08/01
  219.         W97M.No_va.F              File infector            11/13/01
  220.         W97M.Progsatz.Gen         File infector            11/20/01
  221.         W97M.Progsatz.kit         File infector            11/20/01
  222.         W97M.Twopey.B             File infector            11/16/01
  223.         W97M.Zina.intd            File infector            11/07/01
  224.         X97M.Codemas.D            File infector            11/01/01
  225.         X97M.Laroux.EB            File infector            11/19/01
  226.         X97M.RChan.A              File infector            11/09/01
  227.         X97M.Slacker.E            File infector            11/05/01
  228.         YRGMule.gen               File infector            11/08/01
  229.  
  230.  
  231.                                                        
  232. New virus definitions (sorted by Date added):
  233.         
  234.         Virus Name                Infection Type          Date added
  235.         ----------                --------------          ----------     
  236.         Backdoor.Uncap            File infector            11/24/01
  237.         O97M.Ethan.A              File infector            11/24/01
  238.         W32.Badtrans.B@mm         File infector            11/24/01
  239.         W32.Cblade.Worm           File infector            11/24/01
  240.         W32.Datus                 File infector            11/24/01
  241.         W32.Elem.Trojan           File infector            11/24/01
  242.         W32.Usen                  File infector            11/24/01
  243.         W97M.Brando               File infector            11/20/01
  244.         W97M.Progsatz.Gen         File infector            11/20/01
  245.         W97M.Progsatz.kit         File infector            11/20/01
  246.         HLLO.Picked.4505          File infector            11/20/01
  247.         VBS.Snav                  File infector            11/20/01
  248.         HackTool.AddrSteal        File infector            11/20/01
  249.         W95.Rufoll                File infector            11/20/01
  250.         W97M.Coldape.B            File infector            11/19/01
  251.         X97M.Laroux.EB            File infector            11/19/01
  252.         Backdoor.Freddy           File infector            11/16/01
  253.         Girl.Worm                 File infector            11/16/01
  254.         W97M.Twopey.B             File infector            11/16/01
  255.         JS.Yama@m                 File infector            11/15/01
  256.         W32.Bumran                File infector            11/15/01
  257.         W32.Delalot.Trojan        File infector            11/15/01
  258.         W32.Dexes                 File infector            11/15/01
  259.         Bloodhound.JS.1           File infector            11/14/01
  260.         Bloodhound.JS.2           File infector            11/14/01
  261.         Bloodhound.JS.3           File infector            11/14/01
  262.         Bloodhound.VBS.3          File infector            11/14/01
  263.         Bloodhound.VBS.4          File infector            11/14/01
  264.         Bloodhound.VBS.5          File infector            11/14/01
  265.         SH.Sizer                  File infector            11/13/01
  266.         W32.Finaldo.B@mm(html)    File infector            11/13/01
  267.         W97M.Death.C              File infector            11/13/01
  268.         W97M.Marfan.C             File infector            11/13/01
  269.         W97M.No_va.F              File infector            11/13/01
  270.         Crec.7000                 File infector            11/11/01
  271.         Insert.282                File infector            11/11/01
  272.         TsuPNG.gen                File infector            11/11/01
  273.         W32.Antites               File infector            11/11/01
  274.         W32.Funsoul@mm            File infector            11/11/01
  275.         W32.Klez.gen@mm           File infector            11/11/01
  276.         W32.Viled@mm              File infector            11/11/01
  277.         W97M.Hope.AE              File infector            11/11/01
  278.         Altx.Trojan               Boot infector            11/09/01
  279.         Backdoor.Nerte            File infector            11/09/01
  280.         Bat.Bvir.2600             File infector            11/09/01
  281.         Bloodhound.W32.Simple     File infector            11/09/01
  282.         Bloodhound.W32.VBWORM     File infector            11/09/01
  283.         Bloodhound.W32.WSWORM     File infector            11/09/01
  284.         BlueSky.1360              File infector            11/09/01
  285.         CYB.195                   File infector            11/09/01
  286.         Cri.Cri.5595.dr           File infector            11/09/01
  287.         HLLC.8001.E               File infector            11/09/01
  288.         Koths.2962                File infector            11/09/01
  289.         Slowly.gen                File infector            11/09/01
  290.         TBG.951                   File infector            11/09/01
  291.         V.454                     File infector            11/09/01        
  292.         VBS.Magique.Int           File infector            11/09/01
  293.         VCL.Jerk.294              File infector            11/09/01
  294.         Vofca.277                 File infector            11/09/01
  295.         X97M.RChan.A              File infector            11/09/01
  296.         W32.Nimda.enc(dr)         File infector            11/09/01
  297.         W97M.Chack.BS             File infector            11/09/01
  298.         W97M.Mike                 File infector            11/09/01
  299.         YRGMule.gen               File infector            11/08/01
  300.         BGHT.gen                  File infector            11/08/01
  301.         Sillyc.gen                File infector            11/08/01
  302.         Txtdj.gen                 File infector            11/08/01
  303.         CW.219                    File infector            11/08/01
  304.         CW.317                    File infector            11/08/01
  305.         Dead.328                  File infector            11/08/01
  306.         Gob.381                   File infector            11/08/01
  307.         V.323                     File infector            11/08/01
  308.         Soldier.781.B             File infector            11/08/01
  309.         Soldier.747               File infector            11/08/01
  310.         June8.1898                File infector            11/08/01
  311.         VBS.Paukor.B@mm           File infector            11/08/01
  312.         W97M.Mxfile.K             File infector            11/08/01
  313.         W32.Klez.B@mm             File infector            11/08/01
  314.         VBS.Loveletter.BL(2)      File infector            11/08/01
  315.         JS.Xiro.Trojan            File infector            11/08/01
  316.         W97M.Jedi.O               File infector            11/08/01
  317.         W97M.Kiek.A               File infector            11/08/01
  318.         W97M.Mesmoth.A            File infector            11/08/01
  319.         W97M.Lucia.A@mm           File infector            11/08/01
  320.         W97M.Luck                 File infector            11/08/01
  321.         W95.Opa.1103              File infector            11/08/01
  322.         W95.Epip@m                File infector            11/07/01
  323.         Beda.gen                  File infector            11/07/01
  324.         Keyb.gen                  File infector            11/07/01
  325.         W32.Paukor.B@mm           File infector            11/07/01
  326.         VBS.Protest               File infector            11/07/01
  327.         W32.Finaldo.B.enc         File infector            11/07/01
  328.         W32.Finaldo.B.enc(1)      File infector            11/07/01
  329.         W97M.Zina.intd            File infector            11/07/01
  330.         Perl.Atvi@mm              File infector            11/07/01
  331.         W32.Finaldo.B@mm          File infector            11/07/01
  332.         W32.Finaldo.dll           File infector            11/07/01
  333.         W32.Small.gen             File infector            11/07/01
  334.         W32.HLLW.Bloack           File infector            11/07/01
  335.         W32.Drea.Irc              File infector            11/07/01
  336.         W32.Ciosor                File infector            11/07/01
  337.         W32.Silwarr               File infector            11/07/01
  338.         W32.Surse.Mirc            File infector            11/07/01
  339.         Bin.Auto.ARN              File infector            11/07/01
  340.         AWVCK.kit.gen             File infector            11/06/01
  341.         Altx.2663                 File infector            11/06/01
  342.         Altx.2675                 File infector            11/06/01
  343.         Altx.2748                 File infector            11/06/01
  344.         Altx.2889                 File infector            11/06/01
  345.         Bat.Buffer                File infector            11/06/01
  346.         Bat.Falken.B              File infector            11/06/01
  347.         Bat.Funtime               File infector            11/06/01
  348.         Bat.Godog.Trojan          File infector            11/06/01
  349.         Bat.StartV                File infector            11/06/01
  350.         Bat.Tomb.Trojan           File infector            11/06/01
  351.         IRC.Antas                 File infector            11/06/01
  352.         IRC.Melanie               File infector            11/06/01
  353.         IRC.Pron                  File infector            11/06/01
  354.         SillyC.183.b              File infector            11/06/01
  355.         W32.Yerg                  File infector            11/06/01
  356.         VBS.Bici (demo)           File infector            11/05/01
  357.         X97M.Slacker.E            File infector            11/05/01
  358.         IRC.Jeepwarz              File infector            11/05/01
  359.         IRC.Jerret                File infector            11/05/01
  360.         IRC.Toolame               File infector            11/05/01
  361.         IRC.Unable                File infector            11/05/01
  362.         IRC.Wonder                File infector            11/05/01
  363.         Champaigne.749            File infector            11/02/01
  364.         V.272                     File infector            11/02/01
  365.         Mpoc.804                  File infector            11/02/01
  366.         Archiver.1555             File infector            11/02/01
  367.         PS-MPC.Abraxas.1200       File infector            11/02/01
  368.         HDBreak.Trojan            Boot infector            11/02/01
  369.         W32.Redal                 File infector            11/02/01
  370.         Relax.884                 File infector            11/01/01
  371.         SME.Demo                  File infector            11/01/01
  372.         VBS.Zeta.A@mm             File infector            11/01/01
  373.         W32.Nimda.E@mm (dr)       File infector            11/01/01
  374.         W32.SST@mm (dr)           File infector            11/01/01
  375.         X97M.Codemas.D            File infector            11/01/01
  376.  
  377.   
  378.  
  379.  
  380.               
  381.  
  382. Name Changes (sorted by Old Virus Name):
  383.  
  384.         Old Virus Name            New Virus Name          Date changed
  385.         --------------            --------------          ------------
  386.         AntiPas.1108           to Flex.1108                10/18/01
  387.         Backdoor.IRC.SubSeven  to Backdoor.IRC.Flood(2)    10/22/01
  388.         Bat.Putes              to Bat.Stupe                10/01/01
  389.         Bloodhound.JS.Threat   to Bloodhound.VBS.2         11/14/01
  390.         Bloodhound.VBS.Threat  to Bloodhound.VBS.1         11/14/01
  391.         Girlgif.Trojan         to Girl.Worm                11/20/01
  392.         IRC.Glitch.Trojan      to Backdoor.IRC.Flood(3)    10/22/01
  393.         JS.Radirc.A            to JS.Rootlet.A@m           11/01/01
  394.         JS.Rootlet.A@m         to JS.Radirc.A              10/23/01
  395.         O97M.HalfCross.A       to O97M.HalfCross.gen       10/04/01
  396.         O97M.SweetestThing     to O97M.Weete.A             10/16/01
  397.         Trojan.BAT.Regbomb.A   to BAT.Regbomb.A.Trojan     10/03/01
  398.         Trojan.Bat.AntiDN      to Bat.AntiDN.Trojan        10/03/01
  399.         Trojan.Bat.Autorun     to Bat.Autorun.Trojan       10/03/01
  400.         Trojan.Bat.BatKiller   to Bat.BatKiller.Trojan     10/03/01
  401.         Trojan.Bat.DelFiles    to Bat.DelFiles.Trojan      10/03/01
  402.         Trojan.Bat.DelFolder   to Bat.DelFolder.Trojan     10/03/01
  403.         Trojan.Bat.Delauto     to Bat.Delauto.Trojan       10/03/01
  404.         Trojan.Bat.Delini.192  to Bat.Delini.192.Trojan    10/03/01
  405.         Trojan.Bat.Delsys      to Bat.Delsys.Trojan        10/03/01
  406.         Trojan.Bat.Deltree     to Bat.Deltree.Trojan       10/03/01
  407.         Trojan.Bat.DirMaker    to Bat.DirMaker.Trojan      10/03/01
  408.         Trojan.Bat.FakeAV.A    to Bat.FakeAV.A.Trojan      10/03/01
  409.         Trojan.Bat.FakeAV.B    to Bat.FakeAV.B.Trojan      10/03/01
  410.         Trojan.Bat.HDFill      to Bat.HDFill.Trojan        10/03/01
  411.         Trojan.Bat.Hardhead    to Bat.Hardhead.Trojan      10/03/01
  412.         Trojan.Bat.Loop        to Bat.Loop.Trojan          10/03/01
  413.         Trojan.Bat.NTHack      to Bat.NTHack.Trojan        10/03/01
  414.         Trojan.Bat.NTHack.vbs  to Bat.NTHack.vbs.Trojan    10/03/01
  415.         Trojan.Bat.Phat        to Bat.Phat.Trojan          10/03/01
  416.         Trojan.Bat.QuickFormat to Bat.QuickFormat.Trojan   10/03/01
  417.         Trojan.Bat.Rude        to Bat.Rude.Trojan          10/04/01
  418.         Trojan.Bat.Season.A    to Bat.Season.A.Trojan      10/03/01
  419.         Trojan.IRC.Gribble     to IRC.Gribble.Trojan       10/22/01
  420.         Trojan.W97M.Flush.A    to W97M.DSFT.Trojan         10/22/01
  421.         VBS.Doggie             to VBS.Crypter              10/18/01
  422.         VBS.Lee.B@mm           to VBS.VBSWG.B              10/18/01
  423.         VBS.Lee@mm             to VBS.VBSWG.D@mm           10/15/01
  424.         VBS.Magique.Int        to VBS.Loveletter.Int       11/12/01
  425.         VBS.Natiday.A@mm       to VBS.Loveletter.CU@mm     11/11/01
  426.         VBS.Protest            to VBS.Crim.A               11/12/01
  427.         VBS.Retnal.A@mm        to VBS.Loveletter.CW@mm     10/23/01
  428.         VBS.Saur.A             to IRC.Bulbas               11/06/01
  429.         VBS.VWC.A@mm           to VBS.VBSWG.AE@mm          10/16/01
  430.         VBS.Vbswg.gen          to VBS.VBSWG.gen            10/16/01
  431.         VBS.Vbswg.gen(2)       to VBS.VBSWG.gen(2)         10/16/01
  432.         VBS.Vbswg.gen(3)       to VBS.VBSWG.gen(3)         10/16/01
  433.         VBS.Vbswg.gen(4)       to VBS.VBSWG.gen(4)         10/16/01
  434.         W32.Badtrans.13312@mm  to W32.Badtrans.gen@mm      10/22/01
  435.         W32.Dela.Worm          to W32.Delarm.Worm          11/06/01
  436.         W32.HLLW.Giwin         to W32.HLLW.Giwin.gen       10/04/01
  437.         W32.HLLW.Giwin.gen     to W32.Giwin.gen            10/10/01
  438.         W32.Jasmine            to W32.Seppuku.28160        10/11/01
  439.         W32.Klez.B@mm          to W32.Klez.D@mm            11/09/01
  440.         W32.Viled@mm           to W32.Viled.gen            11/13/01
  441.         W32.Vote.C.int         to W32.Kiray.A@mm           10/23/01
  442.         W95.Dedobe             to W95.Dedo                 10/23/01
  443.         W97M.Contamin.A        to W97M.Ramza.B             10/04/01
  444.         W97M.Ethan.EL (2)      to W97M.Ethan.EL            11/01/01
  445.         W97M.Gub               to O97M.Gub                 10/03/01
  446.         W97M.Luar.A            to W97M.Trado.A             10/24/01
  447.         W97M.Peat              to W97M.Titch.J             10/16/01
  448.         W97M.Philippines.A     to W97M.Liberate.A          10/03/01
  449.         W97M.Rusmod.A:Ru       to W97M.NotHere.A:Ru        10/22/01
  450.         W97M.Tester.A          to W97M.Strings.I           10/16/01
  451.         W97M.Thus.ES           to W97M.Thus.FC             10/01/01
  452.         W97M.Trado.A           to W97M.Luar.A              11/01/01
  453.         W97M.Wrath             to W97M.Trolox.A            10/16/01
  454.         X97M.Automat.AH        to X97M.Divi.I              10/03/01
  455.         X97M.Automat.AK        to X97M.Divi.K              10/03/01
  456.         X97M.Codemas.D         to X97M.Slacker.D           11/02/01
  457.         X97M.DIVI.K            to X97M.DIVI.Family         10/03/01
  458.         X97M.Killer            to X97M.Oblivion.A          10/04/01
  459.         X97M.Manalo.D          to X97M.Manalo.E            10/04/01
  460.         X97M.Sugar.Dropper     to X97M.Sugar.E             10/11/01
  461.         X97M.Xif.B             to X97M.Xif.A               10/16/01
  462.         XM.Automat.AG          to XM.Manalo.J              10/04/01
  463.         XM.Automat.S           to XM.Clonar.A              10/03/01
  464.         XM.Diablos             to XM.Diablo.gen            10/03/01
  465.         XM.Manalo.E            to XM.Manalo.H              10/04/01
  466.         XM.Tabej.B             to XM.Tabej.C               10/03/01
  467.         XM.Tabej.C             to XM.Tabej.B               10/03/01
  468.         XM.Yawn                to XM.Yawn.Family           10/03/01
  469.  
  470.        
  471.         
  472. Name Changes (sorted by Date changed):
  473.  
  474.         Old Virus Name            New Virus Name          Date changed
  475.         --------------            --------------          ------------
  476.         Girlgif.Trojan         to Girl.Worm                11/20/01
  477.         Bloodhound.JS.Threat   to Bloodhound.VBS.2         11/14/01
  478.         Bloodhound.VBS.Threat  to Bloodhound.VBS.1         11/14/01
  479.         W32.Viled@mm           to W32.Viled.gen            11/13/01
  480.         VBS.Magique.Int        to VBS.Loveletter.Int       11/12/01
  481.         VBS.Protest            to VBS.Crim.A               11/12/01
  482.         VBS.Natiday.A@mm       to VBS.Loveletter.CU@mm     11/11/01
  483.         W32.Klez.B@mm          to W32.Klez.D@mm            11/09/01
  484.         VBS.Saur.A             to IRC.Bulbas               11/06/01
  485.         W32.Dela.Worm          to W32.Delarm.Worm          11/06/01
  486.         X97M.Codemas.D         to X97M.Slacker.D           11/02/01
  487.         JS.Radirc.A            to JS.Rootlet.A@m           11/01/01
  488.         W97M.Ethan.EL (2)      to W97M.Ethan.EL            11/01/01
  489.         W97M.Trado.A           to W97M.Luar.A              11/01/01
  490.         W97M.Luar.A            to W97M.Trado.A             10/24/01
  491.         JS.Rootlet.A@m         to JS.Radirc.A              10/23/01
  492.         VBS.Retnal.A@mm        to VBS.Loveletter.CW@mm     10/23/01
  493.         W32.Vote.C.int         to W32.Kiray.A@mm           10/23/01
  494.         W95.Dedobe             to W95.Dedo                 10/23/01
  495.         Backdoor.IRC.SubSeven  to Backdoor.IRC.Flood(2)    10/22/01
  496.         IRC.Glitch.Trojan      to Backdoor.IRC.Flood(3)    10/22/01
  497.         Trojan.IRC.Gribble     to IRC.Gribble.Trojan       10/22/01
  498.         Trojan.W97M.Flush.A    to W97M.DSFT.Trojan         10/22/01
  499.         W32.Badtrans.13312@mm  to W32.Badtrans.gen@mm      10/22/01
  500.         W97M.Rusmod.A:Ru       to W97M.NotHere.A:Ru        10/22/01
  501.         AntiPas.1108           to Flex.1108                10/18/01
  502.         VBS.Doggie             to VBS.Crypter              10/18/01
  503.         VBS.Lee.B@mm           to VBS.VBSWG.B              10/18/01
  504.         O97M.SweetestThing     to O97M.Weete.A             10/16/01
  505.         VBS.VWC.A@mm           to VBS.VBSWG.AE@mm          10/16/01
  506.         VBS.Vbswg.gen          to VBS.VBSWG.gen            10/16/01
  507.         VBS.Vbswg.gen(2)       to VBS.VBSWG.gen(2)         10/16/01
  508.         VBS.Vbswg.gen(3)       to VBS.VBSWG.gen(3)         10/16/01
  509.         VBS.Vbswg.gen(4)       to VBS.VBSWG.gen(4)         10/16/01
  510.         W97M.Peat              to W97M.Titch.J             10/16/01
  511.         W97M.Tester.A          to W97M.Strings.I           10/16/01
  512.         W97M.Wrath             to W97M.Trolox.A            10/16/01
  513.         X97M.Xif.B             to X97M.Xif.A               10/16/01
  514.         VBS.Lee@mm             to VBS.VBSWG.D@mm           10/15/01
  515.         X97M.Sugar.Dropper     to X97M.Sugar.E             10/11/01
  516.         W32.Jasmine            to W32.Seppuku.28160        10/11/01
  517.         W32.HLLW.Giwin.gen     to W32.Giwin.gen            10/10/01
  518.         O97M.HalfCross.A       to O97M.HalfCross.gen       10/04/01
  519.         Trojan.Bat.Rude        to Bat.Rude.Trojan          10/04/01
  520.         W32.HLLW.Giwin         to W32.HLLW.Giwin.gen       10/04/01
  521.         W97M.Contamin.A        to W97M.Ramza.B             10/04/01
  522.         X97M.Killer            to X97M.Oblivion.A          10/04/01
  523.         X97M.Manalo.D          to X97M.Manalo.E            10/04/01
  524.         XM.Automat.AG          to XM.Manalo.J              10/04/01
  525.         XM.Manalo.E            to XM.Manalo.H              10/04/01
  526.         Trojan.BAT.Regbomb.A   to BAT.Regbomb.A.Trojan     10/03/01
  527.         Trojan.Bat.AntiDN      to Bat.AntiDN.Trojan        10/03/01
  528.         Trojan.Bat.Autorun     to Bat.Autorun.Trojan       10/03/01
  529.         Trojan.Bat.BatKiller   to Bat.BatKiller.Trojan     10/03/01
  530.         Trojan.Bat.DelFiles    to Bat.DelFiles.Trojan      10/03/01
  531.         Trojan.Bat.DelFolder   to Bat.DelFolder.Trojan     10/03/01
  532.         Trojan.Bat.Delauto     to Bat.Delauto.Trojan       10/03/01
  533.         Trojan.Bat.Delini.192  to Bat.Delini.192.Trojan    10/03/01
  534.         Trojan.Bat.Delsys      to Bat.Delsys.Trojan        10/03/01
  535.         Trojan.Bat.Deltree     to Bat.Deltree.Trojan       10/03/01
  536.         Trojan.Bat.DirMaker    to Bat.DirMaker.Trojan      10/03/01
  537.         Trojan.Bat.FakeAV.A    to Bat.FakeAV.A.Trojan      10/03/01
  538.         Trojan.Bat.FakeAV.B    to Bat.FakeAV.B.Trojan      10/03/01
  539.         Trojan.Bat.HDFill      to Bat.HDFill.Trojan        10/03/01
  540.         Trojan.Bat.Hardhead    to Bat.Hardhead.Trojan      10/03/01
  541.         Trojan.Bat.Loop        to Bat.Loop.Trojan          10/03/01
  542.         Trojan.Bat.NTHack      to Bat.NTHack.Trojan        10/03/01
  543.         Trojan.Bat.NTHack.vbs  to Bat.NTHack.vbs.Trojan    10/03/01
  544.         Trojan.Bat.Phat        to Bat.Phat.Trojan          10/03/01
  545.         Trojan.Bat.QuickFormat to Bat.QuickFormat.Trojan   10/03/01
  546.         Trojan.Bat.Season.A    to Bat.Season.A.Trojan      10/03/01
  547.         W97M.Gub               to O97M.Gub                 10/03/01
  548.         W97M.Philippines.A     to W97M.Liberate.A          10/03/01
  549.         X97M.Automat.AH        to X97M.Divi.I              10/03/01
  550.         X97M.Automat.AK        to X97M.Divi.K              10/03/01
  551.         X97M.DIVI.K            to X97M.DIVI.Family         10/03/01
  552.         XM.Automat.S           to XM.Clonar.A              10/03/01
  553.         XM.Diablos             to XM.Diablo.gen            10/03/01
  554.         XM.Tabej.B             to XM.Tabej.C               10/03/01
  555.         XM.Tabej.C             to XM.Tabej.B               10/03/01
  556.         XM.Yawn                to XM.Yawn.Family           10/03/01
  557.         Bat.Putes              to Bat.Stupe                10/01/01
  558.         W97M.Thus.ES           to W97M.Thus.FC             10/01/01
  559.  
  560.  
  561.         
  562.         
  563. Deletions (sorted by Virus Name):
  564.  
  565.         Virus Name                Infection Type          Date removed
  566.         ----------                --------------          ------------    
  567.         A97M.Amg.A                File infector            06/15/01
  568.         AirCop Dropper            Boot infector            11/13/01
  569.         Backdoor.Systsec          File infector            10/12/01
  570.         Backdoor.Teste            File infector            08/24/01     
  571.         CLS.Win.Joke.34520(1)     File infector            07/17/01
  572.         CLS.Win.Joke.34520(2)     File infector            07/17/01
  573.         Denzuk Dropper            Boot infector            11/13/01
  574.         Eumel.363.A               File infector            08/20/01
  575.         HLLO.Picked.4505          File infector            11/20/01
  576.         ICQ.Junta.Trojan          File infector            11/20/01
  577.         Invalid Certificate       File infector            05/14/01
  578.         MtE.Groove (5)            File infector            06/05/01
  579.         Neno.Trojan               File infector            10/08/01
  580.         PS-MPC (1)                File infector            10/22/01
  581.         PS-MPC (6)                File infector            10/23/01
  582.         PWS.Cain.dr               File infector            09/17/01
  583.         Sailor.1108               File infector            08/22/01 
  584.         Trojan.Billrus.Texto      File infector            07/13/01
  585.         Trojan.VBS.Autoexec       File infector            08/29/01
  586.         Unlucky.2008 (2)          File infector            06/11/01
  587.         Unlucky.2008 (3)          File infector            06/11/01     
  588.         VBS.Zeta.A@mm             File infector            10/16/01
  589.         W32.Antiqfx.B.worm        File infector            08/01/01
  590.         W32.Antiqfx.C.worm        File infector            08/01/01
  591.         W32.Bedtime.2304          File infector            07/02/01
  592.         W32.Vote.B@mm             File infector            09/27/01
  593.         W95.Mul.2012              File infector            05/31/01
  594.         W95.Smoker.Worm@mm        File infector            07/12/01
  595.         W97M.Bottra.D             File infector            10/15/01
  596.         W97M.Galero.A             File infector            11/20/01
  597.         W97M.Marker.NW            File infector            11/20/01
  598.         WM.Kam                    File infector            08/20/01
  599.         X97M.Activated.A          File infector            10/03/01
  600.         X97M.DIVI.J               File infector            10/03/01
  601.         X97M.Divi.G               File infector            10/03/01
  602.         X97M.Divi.M               File infector            10/03/01
  603.         Yosha.761                 File infector            08/22/01    
  604.     
  605. Deletions (sorted by Date removed):
  606.  
  607.         Virus Name                Infection Type          Date removed
  608.         ----------                --------------          ------------        
  609.         HLLO.Picked.4505          File infector            11/20/01
  610.         ICQ.Junta.Trojan          File infector            11/20/01
  611.         W97M.Galero.A             File infector            11/20/01
  612.         W97M.Marker.NW            File infector            11/20/01
  613.         AirCop Dropper            Boot infector            11/13/01
  614.         Denzuk Dropper            Boot infector            11/13/01
  615.         PS-MPC (6)                File infector            10/23/01
  616.         PS-MPC (1)                File infector            10/22/01
  617.         VBS.Zeta.A@mm             File infector            10/16/01
  618.         W97M.Bottra.D             File infector            10/15/01
  619.         Backdoor.Systsec          File infector            10/12/01
  620.         Neno.Trojan               File infector            10/08/01
  621.         X97M.Activated.A          File infector            10/03/01
  622.         X97M.DIVI.J               File infector            10/03/01
  623.         X97M.Divi.G               File infector            10/03/01
  624.         X97M.Divi.M               File infector            10/03/01
  625.         W32.Vote.B@mm             File infector            09/27/01
  626.         PWS.Cain.dr               File infector            09/17/01
  627.         Trojan.VBS.Autoexec       File infector            08/29/01
  628.         Backdoor.Teste            File infector            08/24/01     
  629.         Sailor.1108               File infector            08/22/01 
  630.         Yosha.761                 File infector            08/22/01  
  631.         Eumel.363.A               File infector            08/20/01
  632.         WM.Kam                    File infector            08/20/01
  633.         W32.Antiqfx.B.worm        File infector            08/01/01
  634.         W32.Antiqfx.C.worm        File infector            08/01/01
  635.         CLS.Win.Joke.34520(1)     File infector            07/17/01
  636.         CLS.Win.Joke.34520(2)     File infector            07/17/01
  637.         Trojan.Billrus.Texto      File infector            07/13/01
  638.         W95.Smoker.Worm@mm        File infector            07/12/01
  639.         W32.Bedtime.2304          File infector            07/02/01
  640.         A97M.Amg.A                File infector            06/15/01
  641.         Unlucky.2008 (2)          File infector            06/11/01
  642.         Unlucky.2008 (3)          File infector            06/11/01     
  643.         MtE.Groove (5)            File infector            06/05/01
  644.         W95.Mul.2012              File infector            05/31/01
  645.         Invalid Certificate       File infector            05/14/01
  646.  
  647.  
  648.  
  649. **********************************************************************
  650. **  Enabling Scanning Features                                      **
  651. **********************************************************************
  652.  
  653. Several scanning features can be enabled through the use of an INF 
  654. configuration file.  For NAV for Windows 95/NT version 4.x and later, 
  655. or NAV for OS/2, this configuration file should be called NAVEX15.INF
  656. and should be placed in the directory where NAV is installed (i.e.,
  657. C:\Program Files\Norton AntiVirus).  For NAV for Netware version 4.x,
  658. the file should be called NAVEX15.INF and should be placed in the 
  659. directory where NAV 4.x is installed (i.e., sys:system\navnlm). For
  660. NAV for Windows 95/NT version 2.0, NAV 4.x for Windows 3.1/DOS,
  661. NAVIEG 1.x, or NAVFW 1.x, the file should be named NAVEX.INF and
  662. should be placed in the directory where NAV is installed (i.e., C:\NAV).
  663. If this configuration file does not exist, create one in the appropriate
  664. directory if you want to change the default settings.
  665.  
  666. To enable a scanning feature for a particular component, one or more 
  667. entries need to be added to the configuration file under the correct
  668. section.  For each platform there is a corresponding section that is used 
  669. in the INF file.  Below is a table of section names and platforms.
  670.  
  671. Section Name    Platform
  672. ------------    --------
  673. NAVW32          Windows 95/98/NT
  674. NAVAP           Windows 95/98/NT Auto-Protect
  675. NAVDX           DOS
  676. NAVNLM          Netware
  677. NAVWIN          Windows 3.1
  678. NAVOS2          OS/2
  679. NAVAIX          AIX
  680. NAVSOL          Solaris
  681.  
  682. Entries are case insensitive.  Below is a description of possible 
  683. entries.
  684.  
  685. 1. Files can be excluded from scans by the NAVEX engine.  To exclude a
  686. specific file from the NAVEX engine scan, add an entry with the full
  687. path and file name.  This is case insensitive.  No wildcards are allowed.
  688. To exclude multiple files, add a separate entry for each file.  To exclude
  689. a file, add an entry like the one below where <PATH> is the full path
  690. and file name.
  691.         ExcludeFile = <PATH>
  692.  
  693. 2. Files within a directory can be excluded from scans by the NAVEX engine.
  694. To exclude all files within a directory, add an entry with the full 
  695. directory path.  This is case insensitive.  No wildcards are allowed.  This
  696. does not exclude files located in subdirectories of the specified 
  697. directory.  To exclude multiple directories, add a separate entry for each
  698. directory. To exclude a directory, add an entry like the one below where
  699. <DIRECTORY> is the full path.
  700.         ExcludeDirectory = <DIRECTORY>
  701.  
  702. The following example of an INF configuration file excludes two files, 
  703. NOSCAN.EXE and BIGFILE.DOC, from NAVEX scans for the Windows 95/98/NT 
  704. scanner.  It excludes the D:\PRIVATE directory from Windows 95/98/NT 
  705. Auto-Protect.
  706.  
  707. [NAVW32]
  708. ExcludeFile = C:\PROGRAM FILES\NOSCAN.EXE
  709. ExcludeFile = C:\TEMP\BIGFILE.DOC
  710.  
  711. [NAVAP]
  712. ExcludeDirectory = D:\PRIVATE
  713.  
  714. **********************************************************************
  715. **    Additional Information                                        **
  716. **********************************************************************
  717.  
  718. Additional information regarding this virus definitions update can be
  719. found in UPDATE.TXT and TECHNOTE.TXT.
  720.  
  721.  
  722.  
  723.  
  724.  
  725.  
  726.  
  727.  
  728.  
  729.  
  730.  
  731.  
  732.  
  733.  
  734.  
  735.  
  736.  
  737.  
  738.  
  739.  
  740.  
  741.  
  742.  
  743.  
  744.  
  745.  
  746.  
  747.  
  748.  
  749.  
  750.  
  751.  
  752.  
  753.  
  754.  
  755.  
  756.  
  757.  
  758.  
  759.  
  760.  
  761.  
  762.  
  763.  
  764.  
  765.  
  766.  
  767.  
  768.  
  769.  
  770.  
  771.