********************************************************************** ** ** ** What's New in the NAV Virus Definitions Files WHATSNEW.TXT ** ** ** ** Symantec Security Response July 22, 2004 ** ** ** ********************************************************************** This document contains the following topics: * Virus Alerts * Changes Incorporated Into This Update * Additional Information ********************************************************************** ** Virus Alerts ** ********************************************************************** The ten most commonly reported viruses for April 2004, worldwide: 1 Trojan Horse 2 W32.HLLW.Gaobot.gen 3 W32.Netsky.P@mm 4 W32.Beagle.M@mm 5 W32.Netsky.D@mm 6 W32.Bugbear.B@mm 7 W32.Netsky.Y@mm 8 W32.Netsky.C@mm 9 VBS.Redlof.A 10 W32.Randex.gen ********************************************************************** ** Changes Incorporated Into This Virus Definitions Update ** ********************************************************************** DATE ---- New virus definitions (sorted by Virus Name): Virus Name Infection Type Date added ---------- -------------- --------- Adware.Adlogix File infector 07/19/04 Adware.AdultLinks.B File infector 07/16/04 Adware.Fizzle File infector 07/12/04 Adware.Hithopper File infector 07/16/04 Adware.OverPro File infector 07/20/04 Backdoor.Agent.B File infector 07/21/04 Backdoor.Berbew.H File infector 07/08/04 Backdoor.Doster File infector 07/15/04 Backdoor.Kika.A File infector 07/13/04 Backdoor.Xebiz File infector 07/13/04 Backdoor.Xordoor File infector 07/21/04 Bloodhound.Exploit.11 File infector 07/12/04 Bloodhound.Exploit.12 File infector 07/13/04 Dauq.2465 File infector 07/12/04 Dialer.7AdPower File infector 07/16/04 Dialer.Coder File infector 07/06/04 Hacktool.KeyLoggPro.B File infector 07/19/04 Menuet.Xymo File infector 07/07/04 PWSteal.Likmet.A File infector 07/05/04 PWSteal.QQlove!int File infector 07/14/04 Spyware.AceSpy File infector 07/20/04 Spyware.ActivMonAgent File infector 07/20/04 Spyware.ActivityLog File infector 07/20/04 Spyware.AdvancedKey File infector 07/16/04 Spyware.Alexa File infector 07/19/04 Spyware.AppsTraka File infector 07/19/04 Spyware.Ardakey.B File infector 07/09/04 Spyware.BEverywhere.B File infector 07/07/04 Spyware.ChatWatch File infector 07/16/04 Spyware.DSpy File infector 07/16/04 Spyware.Dogpile File infector 07/16/04 Spyware.Farsighter File infector 07/19/04 Spyware.GURLWatcher File infector 07/12/04 Spyware.GhostKeyLog File infector 07/20/04 Spyware.HackerWacker File infector 07/19/04 Spyware.IamBigBrother File infector 07/16/04 Spyware.IkitecKL File infector 07/20/04 Spyware.InvisibleKey File infector 07/16/04 Spyware.KeyCollect File infector 07/20/04 Spyware.KeyKey File infector 07/16/04 Spyware.KeyThief File infector 07/19/04 Spyware.ModemSpy File infector 07/16/04 Spyware.NetVizor File infector 07/20/04 Spyware.PCAcme.B File infector 07/11/04 Spyware.PCParent File infector 07/19/04 Spyware.Perfect.B File infector 07/16/04 Spyware.SKIn File infector 07/16/04 Spyware.SpyAOL File infector 07/19/04 Spyware.SpyAssault File infector 07/20/04 Spyware.SpyGraphica File infector 07/16/04 Spyware.SurfSpy File infector 07/13/04 Spyware.Topicks File infector 07/16/04 Spyware.WebMailSpy File infector 07/09/04 Spyware.WinKeyG File infector 07/16/04 Spyware.Winvest File infector 07/08/04 Spyware.XpcSpy File infector 07/16/04 Spyware.iProtectYou File infector 07/20/04 Spyware.iiPwrKeySpy File infector 07/16/04 Trojan.Cargao File infector 07/14/04 Trojan.Ecure.B File infector 07/06/04 Trojan.Ecure.C File infector 07/07/04 Trojan.Foron File infector 07/13/04 Trojan.Lamud File infector 07/07/04 Trojan.Otinet File infector 07/04/04 Trojan.Spabot File infector 07/04/04 VBS.Gaggle.E@mm File infector 07/08/04 VBS.Threemind File infector 07/17/04 W32.Agist.A@mm File infector 07/19/04 W32.Atak@mm File infector 07/14/04 W32.Beagle.AA@mm File infector 07/12/04 W32.Beagle.AB@mm File infector 07/16/04 W32.Beagle.AC@mm File infector 07/17/04 W32.Beagle.AF@mm File infector 07/19/04 W32.Beagle.AG@mm File infector 07/19/04 W32.Beagle.Y@mm!src File infector 07/06/04 W32.Beagle.Z@mm File infector 07/05/04 W32.Entag@mm File infector 07/07/04 W32.Fremmy@mm File infector 07/07/04 W32.Gaobot.AZT File infector 07/19/04 W32.Gaobot.BAI File infector 07/21/04 W32.Hardoc@mm File infector 07/11/04 W32.Jared File infector 07/07/04 W32.Korgo.K File infector 07/07/04 W32.Korgo.X File infector 07/09/04 W32.Lasbat File infector 07/07/04 W32.Lemoor.A File infector 07/11/04 W32.LovGate.Z@mm File infector 07/05/04 W32.Lovgate.AB@mm File infector 07/07/04 W32.Lovgate.AC@mm File infector 07/13/04 W32.Lovgate.AD@mm File infector 07/13/04 W32.Olatsky@mm File infector 07/16/04 W32.Poco File infector 07/08/04 W32.Rile File infector 07/20/04 W32.Salvame File infector 07/20/04 W32.Slime.B File infector 07/15/04 W32.Turta@mm File infector 07/07/04 W97M.Diperis.A File infector 07/20/04 W97M.Kuna File infector 07/21/04 WinCE.Duts File infector 07/17/04 Worm.Automat.AHQ File infector 07/19/04 New virus definitions (sorted by Date added): Virus Name Infection Type Date added ---------- -------------- ---------- Backdoor.Agent.B File infector 07/21/04 Backdoor.Xordoor File infector 07/21/04 W32.Gaobot.BAI File infector 07/21/04 W97M.Kuna File infector 07/21/04 Adware.OverPro File infector 07/20/04 Spyware.AceSpy File infector 07/20/04 Spyware.ActivMonAgent File infector 07/20/04 Spyware.ActivityLog File infector 07/20/04 Spyware.GhostKeyLog File infector 07/20/04 Spyware.IkitecKL File infector 07/20/04 Spyware.KeyCollect File infector 07/20/04 Spyware.NetVizor File infector 07/20/04 Spyware.SpyAssault File infector 07/20/04 Spyware.iProtectYou File infector 07/20/04 W32.Rile File infector 07/20/04 W32.Salvame File infector 07/20/04 W97M.Diperis.A File infector 07/20/04 Adware.Adlogix File infector 07/19/04 Hacktool.KeyLoggPro.B File infector 07/19/04 Spyware.Alexa File infector 07/19/04 Spyware.AppsTraka File infector 07/19/04 Spyware.Farsighter File infector 07/19/04 Spyware.HackerWacker File infector 07/19/04 Spyware.KeyThief File infector 07/19/04 Spyware.PCParent File infector 07/19/04 Spyware.SpyAOL File infector 07/19/04 W32.Agist.A@mm File infector 07/19/04 W32.Beagle.AF@mm File infector 07/19/04 W32.Beagle.AG@mm File infector 07/19/04 W32.Gaobot.AZT File infector 07/19/04 Worm.Automat.AHQ File infector 07/19/04 VBS.Threemind File infector 07/17/04 W32.Beagle.AC@mm File infector 07/17/04 WinCE.Duts File infector 07/17/04 Adware.AdultLinks.B File infector 07/16/04 Adware.Hithopper File infector 07/16/04 Dialer.7AdPower File infector 07/16/04 Spyware.AdvancedKey File infector 07/16/04 Spyware.ChatWatch File infector 07/16/04 Spyware.DSpy File infector 07/16/04 Spyware.Dogpile File infector 07/16/04 Spyware.IamBigBrother File infector 07/16/04 Spyware.InvisibleKey File infector 07/16/04 Spyware.KeyKey File infector 07/16/04 Spyware.ModemSpy File infector 07/16/04 Spyware.Perfect.B File infector 07/16/04 Spyware.SKIn File infector 07/16/04 Spyware.SpyGraphica File infector 07/16/04 Spyware.Topicks File infector 07/16/04 Spyware.WinKeyG File infector 07/16/04 Spyware.XpcSpy File infector 07/16/04 Spyware.iiPwrKeySpy File infector 07/16/04 W32.Beagle.AB@mm File infector 07/16/04 W32.Olatsky@mm File infector 07/16/04 Backdoor.Doster File infector 07/15/04 W32.Slime.B File infector 07/15/04 PWSteal.QQlove!int File infector 07/14/04 Trojan.Cargao File infector 07/14/04 W32.Atak@mm File infector 07/14/04 Backdoor.Kika.A File infector 07/13/04 Backdoor.Xebiz File infector 07/13/04 Bloodhound.Exploit.12 File infector 07/13/04 Spyware.SurfSpy File infector 07/13/04 Trojan.Foron File infector 07/13/04 W32.Lovgate.AC@mm File infector 07/13/04 W32.Lovgate.AD@mm File infector 07/13/04 Adware.Fizzle File infector 07/12/04 Bloodhound.Exploit.11 File infector 07/12/04 Dauq.2465 File infector 07/12/04 Spyware.GURLWatcher File infector 07/12/04 W32.Beagle.AA@mm File infector 07/12/04 Spyware.PCAcme.B File infector 07/11/04 W32.Hardoc@mm File infector 07/11/04 W32.Lemoor.A File infector 07/11/04 Spyware.Ardakey.B File infector 07/09/04 Spyware.WebMailSpy File infector 07/09/04 W32.Korgo.X File infector 07/09/04 Backdoor.Berbew.H File infector 07/08/04 Spyware.Winvest File infector 07/08/04 VBS.Gaggle.E@mm File infector 07/08/04 W32.Poco File infector 07/08/04 Menuet.Xymo File infector 07/07/04 Spyware.BEverywhere.B File infector 07/07/04 Trojan.Ecure.C File infector 07/07/04 Trojan.Lamud File infector 07/07/04 W32.Entag@mm File infector 07/07/04 W32.Fremmy@mm File infector 07/07/04 W32.Jared File infector 07/07/04 W32.Korgo.K File infector 07/07/04 W32.Lasbat File infector 07/07/04 W32.Lovgate.AB@mm File infector 07/07/04 W32.Turta@mm File infector 07/07/04 Dialer.Coder File infector 07/06/04 Trojan.Ecure.B File infector 07/06/04 W32.Beagle.Y@mm!src File infector 07/06/04 PWSteal.Likmet.A File infector 07/05/04 W32.Beagle.Z@mm File infector 07/05/04 W32.LovGate.Z@mm File infector 07/05/04 Trojan.Otinet File infector 07/04/04 Trojan.Spabot File infector 07/04/04 Name Changes (sorted by Old Virus Name): Old Virus Name New Virus Name Date changed -------------- -------------- ------------ PWSteal.Tarno.E to PWSteal.Tarno.E 07/06/04 Backdoor.Padodor to Backdoor.Berbew.D 04/21/04 Backdoor.Sdbot.U to Backdoor.Sdbot.Y 04/23/04 Backdoor.Skobie.A to Spyware.FamilyKeylog 05/02/04 EPOC.Cabir to SymbOS.Cabir 06/21/04 JS.Offiz to Trojan.Offiz 06/21/04 O97M.Tristate.Variant to O97M.Tristate.B 06/04/04 PWSteal.Skobie to Spyware.SpyAgent 05/12/04 PWSteal.Skobie.B to Backdoor.Haxdoor.B 05/20/04 PWSteal.Skobie.C to W32.Gaobot.ALV 05/25/04 Trojan.Ascetic.A to W32.Erkez.B@mm (2) 06/14/04 Trojan.Simcss.B to Adware.Slagent 04/26/04 W32.Ainesey.A@mm (vbs) to W32.Ainesey.A@mm!vbs 06/30/04 W32.Beagle.AF@mm to W32.Mydoom.L@m 07/19/04 W32.Bobax.A to W32.Bobax.B 05/19/04 W32.Dumaru.AJ@mm to Backdoor.Nibu.F 05/18/04 W32.HLLW.Antinny.L to Trojan.Upbit 05/23/04 W32.HLLW.Gearbug@mm to W32.Bugbros.B@mm 04/26/04 W32.Korgo.H to W32.Korgo.I 06/29/04 W32.Korgo.I to W32.Korgo.N 06/29/04 W32.Korgo.M to W32.Korgo.S 06/28/04 W32.Korgo.N to W32.Korgo.T 06/28/04 W32.Korgo.O to W32.Korgo.U 06/28/04 W32.Korgo.Q to W32.Korgo.V 06/28/04 W32.LovGate.Z@mm to W32.Lovgate.Z@mm 07/06/04 W32.Mintop@mm to W32.Bigfairy.C@mm 04/19/04 W32.Mota.A to W32.Mota.A@mm 07/06/04 W32.Mydoom.L@m to W32.Mydoom.L@mm 07/19/04 W32.Netsup@mm to W32.Netsup.A@mm 05/31/04 W32.Poco to W32.Korgo.Y 07/13/04 W32.Randex.XU to Trojan.Niska 04/18/04 W32.Sober.H@mm to Trojan.Ascetic.A 06/12/04 W97.Saver.H to W97M.Saver.H 05/07/04 W97M.Anumps.A (dr) to IRC.Anumps.A 07/06/04 WM.Not_a_virus to WM.Schupfl 06/21/04 Worm.Automat.AHP to W32.Gorm@mm 07/07/04 Name Changes (sorted by Date changed): Old Virus Name New Virus Name Date changed -------------- -------------- ------------ W32.Beagle.AF@mm to W32.Mydoom.L@m 07/19/04 W32.Mydoom.L@m to W32.Mydoom.L@mm 07/19/04 W32.Poco to W32.Korgo.Y 07/13/04 Worm.Automat.AHP to W32.Gorm@mm 07/07/04 PWSteal.Tarno.E to PWSteal.Tarno.E 07/06/04 W32.LovGate.Z@mm to W32.Lovgate.Z@mm 07/06/04 W32.Mota.A to W32.Mota.A@mm 07/06/04 W97M.Anumps.A (dr) to IRC.Anumps.A 07/06/04 W32.Ainesey.A@mm (vbs) to W32.Ainesey.A@mm!vbs 06/30/04 W32.Korgo.H to W32.Korgo.I 06/29/04 W32.Korgo.I to W32.Korgo.N 06/29/04 W32.Korgo.M to W32.Korgo.S 06/28/04 W32.Korgo.N to W32.Korgo.T 06/28/04 W32.Korgo.O to W32.Korgo.U 06/28/04 W32.Korgo.Q to W32.Korgo.V 06/28/04 EPOC.Cabir to SymbOS.Cabir 06/21/04 JS.Offiz to Trojan.Offiz 06/21/04 WM.Not_a_virus to WM.Schupfl 06/21/04 Trojan.Ascetic.A to W32.Erkez.B@mm (2) 06/14/04 W32.Sober.H@mm to Trojan.Ascetic.A 06/12/04 O97M.Tristate.Variant to O97M.Tristate.B 06/04/04 W32.Netsup@mm to W32.Netsup.A@mm 05/31/04 PWSteal.Skobie.C to W32.Gaobot.ALV 05/25/04 W32.HLLW.Antinny.L to Trojan.Upbit 05/23/04 PWSteal.Skobie.B to Backdoor.Haxdoor.B 05/20/04 W32.Bobax.A to W32.Bobax.B 05/19/04 W32.Dumaru.AJ@mm to Backdoor.Nibu.F 05/18/04 PWSteal.Skobie to Spyware.SpyAgent 05/12/04 W97.Saver.H to W97M.Saver.H 05/07/04 Backdoor.Skobie.A to Spyware.FamilyKeylog 05/02/04 Trojan.Simcss.B to Adware.Slagent 04/26/04 W32.HLLW.Gearbug@mm to W32.Bugbros.B@mm 04/26/04 Backdoor.Sdbot.U to Backdoor.Sdbot.Y 04/23/04 Backdoor.Padodor to Backdoor.Berbew.D 04/21/04 W32.Mintop@mm to W32.Bigfairy.C@mm 04/19/04 W32.Randex.XU to Trojan.Niska 04/18/04 Deletions (sorted by Virus Name): Virus Name Infection Type Date removed ---------- -------------- ------------ A2K.Damcor File infector 05/19/04 Already.71 File infector 06/17/04 Backdoor.Anyserv.B File infector 04/21/04 Dialer.Goin File infector 06/05/04 Linux.Metis File infector 06/17/04 Linux.Thebe File infector 06/17/04 Remacc.Dwremote File infector 07/21/04 W32.Gaobot!inf File infector 05/03/04 W32.Korgo!gen File infector 06/23/04 W32.Korgo.L File infector 06/17/04 W32.Korgo.P File infector 06/23/04 W32.Randex.ATS File infector 06/23/04 W32.Sasser.G File infector 06/13/04 Worm.Automat.AHL File infector 04/19/04 Worm.Automat.AHM File infector 05/19/04 Worm.Automat.AHN File infector 05/19/04 Deletions (sorted by Date removed): Virus Name Infection Type Date removed ---------- -------------- ------------ Remacc.Dwremote File infector 07/21/04 W32.Korgo!gen File infector 06/23/04 W32.Korgo.P File infector 06/23/04 W32.Randex.ATS File infector 06/23/04 Already.71 File infector 06/17/04 Linux.Metis File infector 06/17/04 Linux.Thebe File infector 06/17/04 W32.Korgo.L File infector 06/17/04 W32.Sasser.G File infector 06/13/04 Dialer.Goin File infector 06/05/04 A2K.Damcor File infector 05/19/04 Worm.Automat.AHM File infector 05/19/04 Worm.Automat.AHN File infector 05/19/04 W32.Gaobot!inf File infector 05/03/04 Backdoor.Anyserv.B File infector 04/21/04 Worm.Automat.AHL File infector 04/19/04 ********************************************************************** ** Additional Information ** ********************************************************************** Additional information regarding this virus definitions update can be found in UPDATE.TXT and TECHNOTE.TXT.