********************************************************************** ** ** ** What's New in the NAV Virus Definitions Files WHATSNEW.TXT ** ** ** ** Symantec AntiVirus Research Center (SARC) September 02, 1998 ** ** ** ********************************************************************** This document contains the following topics: * Virus Alerts * New Technologies * Changes Incorporated Into This Update * Additional Information ********************************************************************** ** Virus Alerts ** ********************************************************************** The ten most commonly reported viruses, worldwide: 1 Form.A 2 WM.Concept.A 3 AntiEXE.A 4 One Half 5 Stoned.Empire.Monkey.B 6 Junkie 7 AntiCMOS.A 8 Parity Boot.B 9 Natas.4744 10 NYB Be on the alert for the following viruses in the following regions: AntiCMOS.A USA, Europe AntiEXE USA, Europe, India, Japan Anxiety.1536 USA and Europe DuBug.3999 Europe Junkie Europe, Asia and Australia NYB North America One_Half Europe, India and Mexico Parity_Boot Central and Northern Europe Sat_Bug.Natas Central and South America WM.Concept Worldwide WM.Wazzu Worldwide ********************************************************************** ** New Technologies ** ********************************************************************** DATE Technologies Added ---- ------------------ 8/19/98 Excel heuristics which detect and repair new and unknown macro viruses in Excel 95 & 97 documents. ********************************************************************** ** Changes Incorporated Into This Virus Definitions Update ** ********************************************************************** New virus definitions: Virus Name Infection Type Week added ---------- -------------- ---------- Agen.6500 File infector 8/26/98 Agen.6500(2) File infector 8/26/98 Agen.6500(3) File infector 8/26/98 AM.Accessiv.C File infector 8/26/98 AM.Jaring.intended File infector 8/26/98 Andromeda.370 File infector 9/02/98 Anxiety.E File infector 8/26/98 APE.PHANT1.C File infector 8/26/98 APPARAITION.7035 File infector 8/26/98 Apparation.C File infector 8/26/98 APPARITION.4360 File infector 8/26/98 APPARITION.4360 (1) File infector 8/26/98 Apparition.5959 File infector 8/12/98 Apparition.A File infector 8/26/98 Apparition.B (Gen1) File infector 8/26/98 Apparition.B1(Gen1) File infector 8/26/98 Apparition.D File infector 8/26/98 Apparition.W95.B File infector 8/26/98 Asim.cmp.1539 File infector 8/26/98 Ausih.cmp.322 File infector 8/12/98 BackOrifice.Trojan File infector 8/05/98 Bastard.455 File infector 8/26/98 Bastard.455 (2) File infector 8/26/98 Beeper.957 File infector 8/26/98 Beeper.957 (2) File infector 8/26/98 Before.2915 File infector 9/02/98 Bleah.C Boot infector 8/26/98 Bloodhound.ExcelMacro File infector 8/12/98 Bloodhound.Poly File infector 9/02/98 c-mos.800 File infector 8/26/98 c-mos.800 (2) File infector 8/26/98 c-mos.800 (3) File infector 8/26/98 Carol.4869 File infector 8/26/98 Carol.4869 (2) File infector 8/26/98 Carol.4869 (3) File infector 8/26/98 Cheska.4630 File infector 8/26/98 Cheska.4630 (2) File infector 8/26/98 Cheska.4630 (3) File infector 8/26/98 CLME.Amoeba (d) File infector 8/26/98 CONDOR.1027 File infector 8/26/98 Cow.3081 File infector 8/26/98 Cow.3081(x) File infector 8/26/98 Crasher.439 File infector 8/12/98 CROWL Trojan File infector 7/29/98 CSL.909 File infector 8/26/98 Darth Vader.4 File infector 8/26/98 Deceneu.2086 File infector 8/26/98 Deceneu.2086 (2) File infector 8/26/98 Dementia.4218 File infector 9/02/98 Dikshev.1334 File infector 9/02/98 Dikshev.1334 (3) File infector 9/02/98 DjiN.133 File infector 8/26/98 Dstrux.574 File infector 8/12/98 Duriki.143 File infector 8/12/98 Duriki.ow.144 File infector 8/12/98 ElDorado.gf (3) File infector 8/26/98 ElDorado.gr File infector 8/26/98 ElDorado.gr (2) File infector 8/26/98 F11.1079 File infector 8/26/98 Fart.3794 File infector 8/26/98 Game.544 File infector 9/02/98 Generic Joke Program File infector 7/29/98 Ghost of Zealand File infector 7/29/98 GRNCATERPILLAR.8224 File infector 8/26/98 GRNCATERPILLAR.8224-2 File infector 8/26/98 GRNCATERPILLAR.8224-3 File infector 8/26/98 GW.1201 File infector 8/26/98 Harrier.1500 File infector 9/02/98 Hello.2600 File infector 8/26/98 Hello.2600(2) File infector 8/26/98 Hello.5632 File infector 8/26/98 Helloween.1376b File infector 8/26/98 Helloween.1376b (2) File infector 8/26/98 Hider.599 File infector 8/26/98 Hider.599 (2) File infector 8/26/98 HLL.11840 File infector 8/26/98 HLL.22922 File infector 8/12/98 HLL.22922(2) File infector 8/12/98 HLL.36504.UNP File infector 8/26/98 HLL.4725 File infector 8/26/98 HLL.4725(2) File infector 8/26/98 HLL.5381 File infector 8/26/98 HLL.5381(2) File infector 8/26/98 HLL.6688 File infector 8/12/98 HLL.6688(2) File infector 8/12/98 HLL.cmp.8086 File infector 8/26/98 HLL.cmp.8086 (2) File infector 8/26/98 HLL.cmp.8086 (3) File infector 8/26/98 HLL.CMP.Smuilt File infector 8/26/98 HLL.CMP.Smuilt (2) File infector 8/26/98 HLL.ow.2827 File infector 8/12/98 HLL.ow.2827 (2) File infector 8/12/98 HLL.ow.4805 File infector 8/12/98 HLL.ow.4805(2) File infector 8/12/98 HLL.ow.6400 File infector 8/12/98 HLL.ow.6400(2) File infector 8/12/98 HLLO.2666 File infector 8/26/98 HLLO.4937 File infector 8/26/98 HLLO.4937(2) File infector 8/26/98 HLLO.5057 File infector 8/26/98 HLLO.5057(2) File infector 8/26/98 HLLP.10058 File infector 8/26/98 HLLP.10058 (2) File infector 8/26/98 HLLP.10272 File infector 8/26/98 HLLP.10272 (2) File infector 8/26/98 HLLP.11712 File infector 8/19/98 HLLP.11712 (2) File infector 8/19/98 HLLP.11712 (3) File infector 8/19/98 HLLP.13040 File infector 8/26/98 HLLP.13040 (2) File infector 8/26/98 HLLP.15152 File infector 8/26/98 HLLP.3327 File infector 8/12/98 HLLP.3327(2) File infector 8/12/98 HLLT.4395.UNP File infector 8/26/98 HLLT.4395.UNP(2) File infector 8/26/98 HLLT.4709 File infector 8/12/98 HLLT.4709b(2) File infector 8/12/98 HLLT.GRAVE.5728 File infector 8/26/98 HLLT.GRAVE.5968 File infector 8/26/98 HLLT.LCAMTUF.3792 File infector 8/26/98 HLLT.LCAMTUF.3792(2) File infector 8/26/98 HLLT.LCAMTUF.3792(3) File infector 8/26/98 HLLT.SATYRICON.7824 File infector 8/26/98 HLLT.WILD BOAR.9301 File infector 8/26/98 Hope.860 File infector 8/12/98 Horsa.1185 File infector 8/26/98 ichthum.1040 File infector 8/26/98 ichthum.1040 (2) File infector 8/26/98 ichthum.1040 (X) File infector 8/26/98 ichthum.1040 (X) (2) File infector 8/26/98 Itch.cmp.158 File infector 8/26/98 Itch.cmp.158 (2) File infector 8/26/98 Java.CrashComm File infector 7/29/98 Java.DiskHog File infector 7/29/98 Java.PickPocket (demo) File infector 7/29/98 JavaApp.Strange Brew File infector 8/19/98 JDC.7474 (2) File infector 8/26/98 JO4.0 File infector 8/26/98 JOPA1.0 File infector 8/26/98 JOPA2.0 File infector 8/26/98 JOPA3.0 File infector 8/26/98 JOPA5.0 File infector 8/26/98 JOPA6.0 File infector 8/26/98 JOPA6.0 (2) File infector 8/26/98 JOPA8.0 File infector 8/26/98 Julia.8300 File infector 8/26/98 KASIUNIA.4097 File infector 9/02/98 Kril.4515 File infector 8/26/98 Kril.5413 File infector 8/26/98 KURELUQUE.5337 File infector 8/26/98 KURELUQUE.5337(2) File infector 8/26/98 KURELUQUE.5337(3) File infector 8/26/98 LaDiosa.2369 File infector 8/26/98 Lazarus.1457 File infector 8/26/98 Lazarus.1457 (2) File infector 8/26/98 Leo.333 File infector 8/26/98 LITERATURA.1966 File infector 8/26/98 Lithium.4113 (2) File infector 8/26/98 Lucy.5286 File infector 8/26/98 Macaroni Lite.252 File infector 8/12/98 Malice.780 File infector 8/12/98 Marl.773 File infector 9/02/98 Marl.773 (2) File infector 9/02/98 MF File infector 9/02/98 MF (2) File infector 9/02/98 MF (3) File infector 9/02/98 MF (4) File infector 9/02/98 Mind.1758 File infector 8/26/98 Mind.1758 (2) File infector 8/26/98 MrHodena.4792 (3) File infector 8/26/98 MrHodena.4792 (4) File infector 8/26/98 MrHodena.4792 (5) File infector 8/26/98 MrHodena.4792 (6) File infector 8/26/98 MrHodena.4792 (7) File infector 8/26/98 Mururoa.3449b File infector 8/26/98 Mururoa.3449b (2) File infector 8/26/98 Mururoa.3449b (3) File infector 8/26/98 Nady.493 File infector 8/26/98 Nautilus.1873 File infector 8/12/98 Nilz.1000 Gen(1) File infector 8/26/98 O97M.Teocatl.B File infector 8/26/98 OC.ow.80 File infector 8/26/98 OCX.DirectoryRename File infector 7/29/98 OCX.Exploder File infector 7/29/98 OCX.FinalX (demo) File infector 7/29/98 OCX.Runner (demo) File infector 7/29/98 OCX.SendFile File infector 7/29/98 Odessa.727 File infector 8/12/98 Olk.4245 File infector 8/26/98 OMSK.GR.619,662 File infector 8/26/98 OOS.4426 File infector 8/26/98 OOS.4426 (2) File infector 8/26/98 Opic.1712 File infector 9/02/98 Paraguay.gr.1705 File infector 8/26/98 Paraguay.gr.1705 (2) File infector 8/26/98 Paraguay.gr.1705 (3) File infector 8/26/98 Phantom1 File infector 8/26/98 Phil.2796 (2) File infector 8/26/98 Phil.2796 (X) File infector 8/26/98 Phil.2796 (X) (2) File infector 8/26/98 Phil.2796.com File infector 8/26/98 Phil.2833 File infector 8/26/98 Phil.2833 (2) File infector 8/26/98 Phil.2833 (X) File infector 8/26/98 Phil.2833 (X) (2) File infector 8/26/98 Phil.4096.mp File infector 8/26/98 Pindonga.2125 File infector 8/26/98 Pinworm.2032 File infector 8/26/98 PINWORM.2590 File infector 8/26/98 Plasma.2154 File infector 9/02/98 Ply.4224 (4) File infector 8/26/98 Ply.4224 (5) File infector 8/26/98 Ply.5175 (1) File infector 8/26/98 Ply.5175(2) File infector 8/26/98 Pombero.GR (1) File infector 8/26/98 QFat.Trojan File infector 8/19/98 Ratboy.289b File infector 8/26/98 Rch.1138 File infector 8/26/98 RPG.314 File infector 8/26/98 RPG.ow.314 File infector 8/12/98 RPME.CMP.A File infector 8/26/98 RPME.cmp.b File infector 8/26/98 RPME.cmp.b(2) File infector 8/26/98 Sailor.1025 File infector 8/26/98 Sailor.Pluto.3672 File infector 9/02/98 Sailor.Pluto.3672 (c) File infector 9/02/98 Sailor.Pluto.3672 (x) File infector 9/02/98 Sandrina.1091 File infector 8/26/98 Semisoft.B.59904 File infector 8/26/98 Sepultura (2) Boot infector 9/02/98 Skim.1454 File infector 8/26/98 Slovak.3584.e File infector 8/12/98 Slovakia.3584.D File infector 8/26/98 SOLEDAD.GR File infector 8/26/98 Sphinx.2520 File infector 8/12/98 Sphinx.2548 File infector 8/12/98 SSR.19834 File infector 9/02/98 StackDump.5495 File infector 8/26/98 STRATOVARIUS.1598 File infector 8/26/98 STRATOVARIUS.1598 (2) File infector 8/26/98 STRATOVARIUS.1598 (3) File infector 8/26/98 SWDie.4000 File infector 8/12/98 Tea Party.1609 File infector 8/26/98 Tea Party.1609 (1) File infector 8/26/98 Tea Party.1609 (2) File infector 8/26/98 Tea Party.1609 (3) File infector 8/26/98 Thunder.1543 File infector 8/26/98 Tobacco.1148 File infector 8/26/98 Tontin.ow File infector 8/26/98 TRIVIAL.91 File infector 8/26/98 Trivial.I.ow.91 File infector 8/12/98 Trix.193 File infector 8/26/98 Trojan 2575 File infector 8/26/98 Trojan.Plimo File infector 8/26/98 Trojan.Win.Dontt File infector 8/26/98 Trojan.Win.FY File infector 8/26/98 Trojan.Win.Taskkill File infector 8/26/98 Trojan.Win95.Jerk File infector 8/26/98 Trout2.6804 File infector 8/26/98 TVED.ow.b File infector 8/26/98 Uh.4926 File infector 8/26/98 Undercut.332 File infector 8/12/98 Undress.GR File infector 8/12/98 VCL.220 File infector 8/26/98 VCL.Parks.164 File infector 8/26/98 VCL.Parks.209 File infector 8/26/98 VOYAGER.508 (1) File infector 8/26/98 W95.Cabanas File infector 8/26/98 W95.Cerebrus File infector 8/26/98 W95.Cerebrus (2) File infector 8/26/98 W95.Cerebrus (3) File infector 8/26/98 W95.DarkSide File infector 8/26/98 W95.Elinca (vxd) File infector 8/26/98 W95.Harry File infector 8/26/98 W95.HLL.186380 File infector 8/26/98 W95.HLL.480099 File infector 8/05/98 W95.HLLP.DeTroie File infector 9/02/98 W95.HongKong.cmp File infector 8/26/98 W95.Inca File infector 9/02/98 W95.Lizard.b File infector 8/26/98 W95.Lizard.b (vxd) File infector 8/26/98 W95.Lizard.b (vxd) (2) File infector 8/26/98 W95.LoRez (dll) File infector 8/26/98 W95.LoRez (dll2) File infector 8/26/98 W95.LoRez (dll3) File infector 8/26/98 W95.Marburg File infector 8/05/98 W95.Marburg.A File infector 8/19/98 W95.Punch File infector 8/26/98 W95.Punch (vxd) File infector 8/26/98 W95.Punch (vxd) (2) File infector 8/26/98 W95.SGWW File infector 8/26/98 W95.Spawn.cmp File infector 8/26/98 W95.Zombie File infector 8/26/98 W97M.Bernie.A File infector 8/26/98 W97M.Boring.A (trojan) File infector 8/26/98 W97M.Cartman.C File infector 8/12/98 W97M.Cartman.D File infector 8/19/98 W97M.Chack.B File infector 8/12/98 W97M.Chack.C File infector 8/12/98 W97M.Chack.D File infector 8/12/98 W97M.Chaos.A File infector 8/26/98 W97M.Class File infector 8/12/98 W97M.Class.D File infector 8/12/98 W97M.Class.F File infector 9/02/98 W97M.Draw.A File infector 8/12/98 W97M.DWMVCK1/ZMK.Gen File infector 9/02/98 W97M.Edds.C File infector 8/12/98 W97M.Eraser.V File infector 8/12/98 W97M.Groov.B File infector 8/05/98 W97M.Jedi.A File infector 8/12/98 W97M.Jedi.B File infector 8/12/98 W97M.Jedi.C File infector 8/05/98 W97M.Kitty.A File infector 8/26/98 W97M.Kitty.B File infector 8/12/98 W97M.MBug.A File infector 8/19/98 W97M.MBug.B File infector 8/19/98 W97M.MBug.C File infector 8/19/98 W97M.MBug.D File infector 8/19/98 W97M.MBug.E File infector 8/19/98 W97M.MBug.F File infector 8/19/98 W97M.MBug.G File infector 8/19/98 W97M.MBug.H File infector 8/19/98 W97M.MBug.I File infector 8/19/98 W97M.MDMA.K File infector 8/12/98 W97M.Minimal.AB File infector 8/19/98 W97M.Multi.H File infector 8/26/98 W97M.Nono.A File infector 8/12/98 W97M.Nottice.F File infector 8/26/98 W97M.PolyM.A File infector 8/26/98 W97M.President.A File infector 8/19/98 W97M.Remark.A File infector 8/26/98 W97M.Satan.B File infector 8/12/98 W97M.Steroid.F File infector 8/12/98 W97M.Steroid.G File infector 8/12/98 W97M.Troz.A File infector 8/26/98 W97M.Ulang.A File infector 8/19/98 W97M.Unhelpful.A File infector 8/19/98 W97M.Vampire.O File infector 8/05/98 W97M.VMPCK1.B File infector 8/19/98 W97M.VMPCK1.D File infector 8/26/98 W97M.VMPCK1A.Gen File infector 9/02/98 W97M.VMPCK1C.Gen File infector 9/02/98 W97M.Wazzu.FD File infector 8/26/98 W97M.ZMK.I File infector 8/19/98 W97M.ZMK.K File infector 8/19/98 W97M.ZMK.L File infector 8/19/98 W97M.ZMK.M File infector 8/19/98 Wasp.1614 File infector 8/26/98 Wasp.1751 File infector 8/26/98 Wasp.1751 (2) File infector 8/26/98 Win.Winlamer2 (1) File infector 8/26/98 Win.Winlamer2 (2) File infector 8/26/98 Win.Winlamer2 (3) File infector 8/26/98 Win.Winlamer2 (4) File infector 8/26/98 Win.Winlamer2 (5) File infector 8/26/98 Win.Winlamer2 (6) File infector 8/26/98 WM.Anarchy.5838 (drp) File infector 8/26/98 WM.Breaktime.A File infector 8/19/98 WM.Colors.BZ File infector 8/26/98 WM.Colors.CA File infector 8/26/98 WM.Concept.CK File infector 8/26/98 WM.Concept.CN File infector 8/19/98 WM.Counter.C File infector 8/26/98 WM.Criminal.A File infector 8/26/98 WM.Crypt.A.intended File infector 8/26/98 WM.Defender.B File infector 8/05/98 WM.DMV.H File infector 8/05/98 WM.DMV.L File infector 8/05/98 WM.EMT.B File infector 8/26/98 WM.EZLN.A File infector 8/26/98 WM.Formater.A File infector 8/26/98 WM.Incarnat.A File infector 8/26/98 WM.Makrone.C File infector 8/26/98 WM.Marbles.A File infector 8/26/98 WM.MDMA.BF File infector 8/19/98 WM.NJ-WMVCK2.U File infector 8/26/98 WM.No_va.C File infector 8/26/98 WM.Nuclear.AC File infector 8/05/98 WM.Panjang.B File infector 8/05/98 WM.Rats.E File infector 8/26/98 WM.Schumann.Q File infector 8/26/98 WM.Schumann.R File infector 8/26/98 WM.Schumann.S File infector 8/26/98 WM.SWLABS.Q File infector 8/26/98 WM.SWT.A.trojan File infector 8/26/98 WM.Therese.A File infector 8/26/98 WM.Toten.C:De File infector 8/26/98 WM.Veneno.B:Es File infector 8/26/98 WM.Wazzu.ES File infector 8/26/98 WM.Wazzu.ET File infector 8/26/98 WM.Wazzu.EU File infector 8/26/98 XF.Paix.B File infector 8/12/98 XM.Compat.A File infector 8/05/98 XM.Disaster.A File infector 8/26/98 XM.Extras.F File infector 8/05/98 XM.Laroux.DS File infector 8/05/98 XM.Laroux.DT File infector 8/12/98 XM.Laroux.DU File infector 8/19/98 XM.Laroux.DV File infector 8/19/98 XM.Laroux.DW File infector 8/19/98 XM.Tabej.C File infector 8/05/98 XRCE.146 File infector 8/26/98 Xres.536 File infector 8/26/98 YUSO.1471 File infector 8/26/98 Z0MBiE.667 File infector 8/12/98 ZANY.139 File infector 8/26/98 Zartowal.4183 File infector 9/02/98 ZCME.16384 File infector 8/26/98 ZCME.16384 (2) File infector 8/26/98 Zhangfan.1535.b File infector 8/26/98 ZhenZhou.2370 File infector 8/26/98 ZhenZhou.2370 (2) File infector 8/26/98 ZhenZhou.2370 (3) File infector 8/26/98 ZhenZhou.2370 (X) File infector 8/26/98 ZhenZhou.2370 (X) (2) File infector 8/26/98 ZhenZhou.2370 (X) (3) File infector 8/26/98 Zombie.667 File infector 8/12/98 Zombie.PGP2 (1) File infector 9/02/98 Zombie.PGP2 (2) File infector 9/02/98 Zombie.PGP2 (3) File infector 9/02/98 Zorm.1123 File infector 9/02/98 Zorm.1123 (2) File infector 9/02/98 Name Changes: Old Virus Name New Virus Name Date changed -------------- -------------- ---------- Raid.5831 to HLLP.Krile.5831 8/05/98 Tonya.1021 to Skater.819 8/12/98 Tonya.977 to Skater.977 8/12/98 W95.CIH.1075 to W95.CIH 8/26/98 W95.Marburg to W95.Marburg.B 8/19/98 WM.DZT.K to WM.DZT.J 8/26/98 WM.MDMA.BF to WM.MDMA.BH 8/19/98 Zohr.4525 to Zohra.4525 8/26/98 Deletions: Virus Name Infection Type Date removed ---------- -------------- ------------ Apparition.5959 File infector 8/05/98 CLME.1528 (2) File infector 8/12/98 CLME.1528 (3) File infector 8/12/98 CLME.1528 (4) File infector 8/12/98 Darth Vader.4 File infector 8/19/98 Game Joke Program File infector 8/19/98 HLL.Meta.13040 File infector 8/05/98 HLL.ow.2827 File infector 8/05/98 HLL.ow.2827 (2) File infector 8/05/98 MrHodena.4792 (3) File infector 8/26/98 MrHodena.4792 (4) File infector 8/26/98 MrHodena.4792 (5) File infector 8/26/98 MrHodena.4792 (7) File infector 8/26/98 Xres.432 File infector 8/19/98 ********************************************************************** ** Additional Information ** ********************************************************************** SARC has equipped Norton AntiVirus with a new feature called "Infestation Mode." If a large number of new or unknown viruses is found on the system during a scan, Norton AntiVirus will automatically enable its highest level of detection. This gives users the most comprehensive protection in cases where a viral infestation may have been detected. If you would like to disable this feature, you can do so by following these instructions: 1. Create a text File called NAVEX15.INF in your Norton AntiVirus directory,e.g., C:\Program Files\Norton AntiVirus. If this file already exist go to step two. 2. Place the following lines in this File on the left-hand margin: [NAVW32] infestmode=0 [NAVDX] infestmode=0 3. Save the File. Additional information regarding this virus definitions update can be found in UPDATE.TXT and TECHNOTE.TXT.