********************************************************************** ** ** ** What's New in the NAV Virus Definitions Files AUG96B.TXT ** ** ** ** Symantec AntiVirus Research Center (SARC) August 8, 1996 ** ** ** ********************************************************************** This document contains the following topics: * XM.Laruox: Detection & Repair for the first Excel Macro Virus * Intelligent Updater * Norton AntiVirus Program Upgrade for Macro Viruses * Virus Alerts * Changes Incorporated into This Update ********************************************************************** ** XM.Laruox: Detection & Repair for the first Excel Macro Virus ** ********************************************************************** This special definition update release adds the capability to detect and repair the first Excel Macro virus, XM.Laroux. This virus is not considered widespread, and does not pose a significant public threat. For the latest information and updates, visit the SARC Web site at: http://www.symantec.com/avcenter ********************************************************************** ** Intelligent Updater ** ********************************************************************** As part of its continuing commitment to fight the spread of computer viruses, Symantec has developed a new program called "Intelligent Updater" to simplify virus definitions files updates. Intelligent Updater locates Norton AntiVirus on your computer and installs new virus definitions files automatically. All you have to do is run the program. The actual program name for Intelligent Updater, which changes from month to month, uses the following form: mmNAVyy.EXE, where mm is the month and yy is the year. For example, 08NAV96B.EXE is the virus definitions files update for August, 1996. See the accompanying file, "UPDATE.TXT," for step-by-step instructions to run the program for each Norton AntiVirus version. ********************************************************************** ** Norton AntiVirus Program Upgrade for Macro Viruses ** ********************************************************************** Norton AntiVirus detects and eliminates a new class of viruses called "macro viruses" that infect Microsoft Word document and template files. All current versions of Norton AntiVirus have this capability. If your installed version of Norton AntiVirus 3.0 (NAV.EXE or NAVW.EXE) is dated earlier than February 23, 1996, or your installed version of Norton AntiVirus for Windows 95 (NAVW32.EXE) is dated earlier than December 1, 1995, you need to upgrade. The Norton AntiVirus upgrade installs the NAV Macro Engine automatically, which detects and eliminates macro viruses. To upgrade your Norton AntiVirus 3.0 program: * Download the file called UPDATEME.EXE * Place the file in an empty directory and execute the file to extract. To upgrade your Norton AntiVirus for Windows 95 program: * Download the file called NAV95PCH.EXE * Place the file in an empty folder and execute the file to extract. Step-by-step instructions are included with each file. If you need additional instructions, a FaxBack service is available at (541) 984-2490 to assist you. UPDATEME.EXE and NAV95PCH.EXE are located where the monthly virus definitions files update are normally found. It is available for download from the Symantec BBS, the Symantec FTP or Web site, CompuServe, America Online, or Microsoft Network. You can also call Customer Service at (800) 441-7234 to order a disk set. ********************************************************************** ** Virus Alerts ** ********************************************************************** The ten most commonly reported viruses (worldwide): Concept NYB AntiEXE AntiCMOS One_Half Junkie Form.A Stoned.Empire.Monkey Parity_Boot Ripper Be on the alert for the following viruses in the following regions: AntiEXE West coast, USA Burglar.1150 Public access sites Concept Universities, corporations, and attachments to electronic mail Gold Trojan (AOL Gold) Public access sites Jumper Southern Europe Junkie Europe, Asia and Australia NYB North East, USA One_Half Europe Parity_Boot Central and Northern Europe Sat_Bug.Natas Central and South America Stoned.Empire.Monkey East and West coasts, USA ********************************************************************** ** Changes Incorporated into This Virus Definitions Update ** ********************************************************************** New virus definitions: Alfons.1344 File infector Alfons.1344 (x) File infector Alive.4000 File infector Andryushka.3568 (2) File infector APE.Phant1.a File infector Arara.1375 File infector Argyle File infector Atom Macro virus Bonsem File infector Boom Macro virus Brain2 File infector Burglar.1150 File infector BW.Factit File infector CIS.800.C File infector CLME File infector Clonewar.255 File infector Clonewar.258 File infector Clonewar.268 File infector Commander Bomber File infector Corporate_Life.1929 File infector Cosenza.3205 File infector Cruncher File infector Cruncher (x) File infector Cvex.7.2.6400 File infector DAME.Lame File infector DAME.Trigger File infector Danish Boot Boot infector Dark_Revenge.1024 File infector Demon IIIB.4767 File infector Drunk.1674 File infector DSCE.2100 File infector DSCE.Demo File infector DSME.Apex.2893 File infector DSME.Connie.2708 File infector DSME.Demo File infector DSME.Teacher File infector Emmie.2440 (1) File infector Emmie.2440 (2) File infector Everfire File infector Far Away File infector Gambit File infector GCAE.2915 File infector Gripe.2040 File infector Grog.1349 (1) File infector Hare.7610 Boot & file infector Hare.7610 (2) Boot & file infector Hare.7610 (2x) Boot & file infector Hare.7610 (b) Boot & file infector Hare.7610 (x) Boot & file infector Hydra v1.3 File infector Hymn.Sverdlov.C File infector Immortal.2185 File infector Jeru.CVEX.6144 (2) File infector Jeru.CVEX.6144 (3) File infector Jeru.CVEX.6144 (4) File infector Jeru.CVEX.6144 (5) File infector Jvirus.2290 File infector K-Hate File infector Kaszana.1848 File infector Kaszana.1920 File infector Kobrin.489 File infector Kobrin.491 File infector Lady_Death File infector Leda.820 File infector Maltese Amoeba (2) File infector Manzon.1445 File infector Manzon.1445.B File infector Mario.661 File infector Mario.746 File infector MDMA Macro virus MEGADETH.3972 File infector Megadeth.3973 File infector Mephisto.510 (2) File infector Mephisto.510 (Gen1) File infector Mirrorop File infector MME.Demo File infector MME.NoName File infector Moctezuma File infector Mombasa.3568 File infector MTE.CoffeeShop File infector MTE.Cryptlab File infector MTE.Engine File infector MTE.Fear File infector MTE.Groove File infector MTE.Insuf (1) File infector MTE.Insuf (2 File infector MTE.Ludwig (2) File infector MTE.PCWeevil.2631 File infector MTE.Pogue File infector MTE.Questo File infector MTE.Sara File infector MTE.Shocker File infector MTE.Zippelin File infector MTZ.4510 File infector Mutagen File infector Mutagen.1_10.B (2) File infector Mutagen.1344 File infector Mutagen.1372 File infector Mutagen.1500 File infector Mutagen.1690 File infector Mutagen.1700 File infector Mutagen.1810 File infector Mutagen.1950 File infector Mutagen.2055 File infector Mutagen.2294 File infector Mutagen.3368 File infector Mutagen.SecretGarden File infector Mutagen.Test.1325 File infector Mutagen.Test.1675 File infector NED.Test File infector Neko2 File infector Neuropath File infector Neuroquila (2) File infector Nightfall.A File infector Nightfall.B File infector NOP (1) Macro virus NOP (2) Macro virus Nostarda.2247 File infector Number 1.B File infector One Half File infector One Half Boot Boot & file infector Parasite (1) Macro virus Parasite (2) Macro virus Particle Man.690 File infector Pedophilia Trojan Trojan Phantasm File infector Pizelun.3599 File infector Pizelun.3599 (x) File infector PME.3788 File infector Predator.1072.B File infector Predator.2448 Boot & file infector Predator.2448 (Gen1) Boot & file infector Quintessence.992 File infector Ras-Patch Trojan File infector RDA.Encrypted (1) File infector RDA.Encrypted (2) File infector Satan Bug.Natas.4740 Boot & file infector Satan Bug.Natas.4744 Boot & file infector Satan Bug.Natas.4746 Boot & file infector Satan Bug.Natas.4766 Boot & file infector Satan Bug.Natas.4774 Boot & file infector Satan Bug.Natas.4988 Boot & file infector Satan Bug.Satan Bug File infector SatanBug.FruitFly File infector Scanner.1879 File infector Sirius.1068 File infector Sirius.1070 File infector Siskin.511 File infector Slovak.3584.A File infector SMEG.Demonstration File infector SMEG.Pathogen File infector SMEG.Queeg.A File infector SMEG.Queeg.C File infector SMEG.SMEG_V3 File infector Talon.2048 Boot & file infector Tanpro.524 File infector TPE.Bosnia (4) File infector TPE.CW.4a File infector TPE.CW.4b File infector TPE.CW.4c File infector TPE.CW.5 File infector TPE.Damaged File infector TPE.Girafe File infector TPE.Kela.4664 File infector TPE.Nazi_Cop File infector TPE.Poetcode File infector TPE.YB File infector TPE.YB.2330 File infector Tremor.4000 File infector Trident.241 File infector TS.b.3072 File infector Uruguay 10 File infector Uruguay 3 File infector Uruguay 4 (2) File infector Uruguay 7 File infector Uruguay.2313 File infector Use Pascal File infector V2P6.B File infector V2P6Z (1) File infector V2P6Z (2) File infector v2px File infector V2Px.1190 File infector V2Px.1236 File infector V2Px.1256 File infector V2Px.1260 File infector V2Px.1440 File infector V2Px.Casper (2) File infector V2Px.P2 File infector VCC.565 File infector VCC.592 File infector VCL.343 File infector VICE.CJ File infector VICE.Iceburn File infector Vice.OneThirteenth File infector Vice.Sample File infector Vinnitsa.1620 (2) File infector Virogen.ASeXual.v0.99 File infector Virogen.Offspring (2) File infector Virogen.Offspring.07 File infector Virogen.Pinworm.2040 File infector Virogen.Pinworm.2371 File infector Virogen.Pinworm.2585 File infector VME.Demo File infector Werewolf.1361 File infector Werewolf.1361 (Gen1) File infector Werewolf.1367 File infector Werewolf.1367 (Gen1) File infector Werewolf.658 File infector Werewolf.684 File infector Werewolf.685 File infector WZ.436.A File infector WZ.436.A (x) File infector Xenixos Macro virus ZL-2 File infector Zortech.836 File infector Changes to previous definitions: Bad-Sectors.3422 Removed HLLC.Happy_Monday.B 5476 Removed Keypress.Chaos Removed Mephisto.1020 Removed Positron Removed Predator.1784 Removed Predator.1784 (b) Removed Wally.981 (2) Removed Andryushka.3568 Renamed to Andryushka.3568 (1) Concept Francais Renamed to Concept.Fr.B Grog.1349 Renamed to Grog.1349 (2) Infezione Macro Renamed to Infezione JVW.928 Renamed to JVW.928 (1) JVW.928 Renamed to JVW.928 (2) Mange_Tout.1091 Renamed to Mange_Tout.1091 (x) Mephisto.510 Renamed to Mephisto.510 (1) Mephisto.510 (Gen1) Renamed to Mephisto.510(Gen1)(1) MtE.Ludwig Renamed to MtE.Ludwig (1) Neuroquila Renamed to Neuroquila (1) Night.2048 Renamed to Night.2048 (1) Night.2048 Renamed to Night.2048 (2) Rajaat.518 Renamed to Rajaat.518 (1) Rajaat.518 Renamed to Rajaat.518 (2) Uruguay 4 Renamed to Uruguay 4 (1) Vinnitsa.1620 Renamed to Vinnitsa.1620 (1) Virogen.Offspring Renamed to Virogen.Offspring (1) V2Px.Casper 1200 Renamed to V2Px.Casper (1) Wazzu Macro Renamed to Wazzu * Please read the file VIRSPEC.TXT for special instructions pertaining to some specific virus repairs. **********************************************************************