home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Desktop Icons 2000
/
Icons2000.iso
/
archive
/
Antivirus
/
Norton Free Upd.exe
/
WHATSNEW.TXT
< prev
Wrap
Text File
|
1999-08-27
|
27KB
|
453 lines
**********************************************************************
** **
** What's New in the NAV Virus Definitions Files WHATSNEW.TXT **
** **
** Symantec AntiVirus Research Center (SARC) August 19, 1999 **
** **
**********************************************************************
This document contains the following topics:
* Virus Alerts
* New Technologies
* Changes Incorporated Into This Update
* Enabling/Disabling PowerPoint Scanning
* Additional Information
**********************************************************************
** Virus Alerts **
**********************************************************************
The ten most commonly reported viruses, worldwide:
1 W97M.Class
2 XM.Laroux
3 O97M.Tristate
4 W95.CIH
5 Happy99.Worm
6 WM.Cap
7 W97M.ColdApe
8 W97M.Ethan
9 W97M.Melissa
10 Worm.ExploreZip
**********************************************************************
** New Technologies **
**********************************************************************
DATE Technologies Added
---- ------------------
8/19/98 * Excel heuristics which detect and repair new and unknown
macro viruses in Excel 95 & 97 documents.
9/16/98 * Added repair for encrypted Excel 97 documents.
10/21/98 * Heuristics to detect AOL Password Stealer Trojans.
* WORD Heuristics improvement to increase detection rate.
12/17/98 * Macro Exclusion Engine to speed up the scanning for Word
and Excel documents.
* PowerPoint engine to scan PowerPoint related viruses.
To enable this technology please read "Enabling/Disabling
PowerPoint Scanning" section later in this document.
02/18/99 * Detection and repair of macro viruses in Word and Excel
2000 documents.
05/12/99 * Added repair for PowerPoint viruses.
* Improved heuristics to detect more WORD 97 related
viruses.
06/10/99 * Menu repair technology for WORD macro viruses that change
command bar customizations in NORMAL.DOT.
07/12/99 * Added support for scanning of Ichitaro 8/9 documents.
(Ichitaro is a Japanese word processing program).
08/19/99 * Added detection and repair for embedded documents inside
PowerPoint 97.
**********************************************************************
** Changes Incorporated Into This Virus Definitions Update **
**********************************************************************
New virus definitions:
Virus Name Infection Type Week added
---------- -------------- ----------
Antiwin.633.B File infector 07/19/99
Avenger.1344 File infector 07/19/99
Avenger.1344 (x) File infector 07/26/99
BackOrifice2K.Inst3 File infector 07/26/99
BackOrifice2K.Inst4 File infector 07/26/99
BALOO.897 File infector 08/02/99
BO2K.Inst3 (2) File infector 07/26/99
BO2K.Inst3 (3) File infector 07/26/99
BO2K.Inst3 (4) File infector 07/26/99
BO2K.Inst4 (2) File infector 07/26/99
BO2K.Inst4 (3) File infector 07/26/99
BO2K.Inst4 (4) File infector 07/26/99
BO2K.Trojan Variant File infector 08/09/99
Boot.666.A Boot infector 07/19/99
Boot.Killer File and Boot infector 07/19/99
BRONTOZAVR.5632.D File infector 07/19/99
BRONTOZAVR.5632.D (x) File infector 07/19/99
Bumble.250 File infector 08/16/99
CAMILO.256 File infector 07/19/99
CLME.Ming.1528 File infector 08/09/99
Codebreaker.1665 File infector 07/19/99
Companion.289 File infector 07/19/99
Companion.Mad.82 File infector 08/16/99
DEADMAN.548 File infector 08/16/99
Deadman.943 File infector 07/19/99
Dei.1792 (Gen) File infector 08/19/99
DELTA.1177 File infector 07/19/99
Deltree Trojan #4 File infector 07/26/99
Deltree Trojan #4 (2) File infector 07/26/99
Denzuk.G Boot infector 07/19/99
DIKSHEV.COMP.38 File infector 08/02/99
DIKSHEV.COMP.40 File infector 08/02/99
DIKSHEV.COMP.41 File infector 08/02/99
DIKSHEV.COMP.43.a File infector 08/02/99
DIKSHEV.COMP.43.b File infector 08/02/99
DIKSHEV.COMP.44.a File infector 08/02/99
DIKSHEV.COMP.44.b File infector 08/02/99
DIKSHEV.COMP.45.A File infector 08/02/99
DIKSHEV.COMP.45.d File infector 08/02/99
DIKSHEV.COMP.46.a File infector 08/02/99
DIKSHEV.COMP.46.b File infector 08/02/99
DIKSHEV.COMP.47 File infector 08/02/99
DIKSHEV.COMP.48 File infector 08/09/99
DIKSHEV.COMP.49 File infector 08/09/99
DIKSHEV.COMP.50 File infector 08/09/99
DIKSHEV.COMP.52 File infector 08/09/99
DIKSHEV.COMP.53 File infector 08/09/99
DIKSHEV.COMP.54 File infector 08/09/99
DIKSHEV.COMP.55 File infector 08/09/99
DIKSHEV.COMP.67 File infector 08/02/99
EXE Infector File infector 08/16/99
Fair.2083 (x) File infector 07/19/99
Glew.4245 Boot infector 07/19/99
Gotcha.Trojan File infector 08/16/99
Gullich.B Boot infector 07/19/99
HAL-COM.2901 File infector 07/19/99
HBV.2000 File infector 08/02/99
HBV.2000 (x) File infector 08/02/99
HG.450 File infector 08/16/99
HLLC.Companion.6796 File infector 08/16/99
HLLC.HEBRA.7413 File infector 08/02/99
HLLC.HEBRA.7413(2) File infector 08/02/99
HLLC.UNVISIBLE.D File infector 08/02/99
HLLC.UNVISIBLE.D(2) File infector 08/02/99
HLLO.2944 File infector 07/19/99
HLLO.2944(2) File infector 07/19/99
HLLO.3520 File infector 08/02/99
HLLO.3520 (2) File infector 08/02/99
HLLO.3520 (3) File infector 08/02/99
HLLO.3552 File infector 07/19/99
HLLO.3552(2) File infector 07/19/99
HLLO.4880 File infector 08/02/99
HLLO.4880 (2) File infector 08/02/99
HLLO.4880 (3) File infector 08/02/99
HLLO.Anti-NATO.4496 File infector 08/02/99
HLLO.Anti-NATO.4496(2) File infector 08/02/99
HLLO.Anti-NATO.4496(3) File infector 08/02/99
HLLO.BIGC.12224 File infector 07/19/99
HLLO.BIGC.12224(2) File infector 07/19/99
HLLO.Chest.2340 File infector 07/19/99
HLLO.Dandler.13112 File infector 07/19/99
HLLO.MBUCK.3760 File infector 07/19/99
HLLO.MBUCK.3760(2) File infector 07/19/99
HLLO.MYON.3549 File infector 08/02/99
HLLO.MYON.3549(2) File infector 08/02/99
HLLP.4318 File infector 08/16/99
HLLP.4318 (2) File infector 08/16/99
HLLP.4318 (3) File infector 08/16/99
hllp.Arian.8936 File infector 07/19/99
hllp.Arian.8936 (2) File infector 07/19/99
hllp.Arian.8936 (3) File infector 07/19/99
HLLP.DUKE.4336 File infector 08/16/99
HLLP.DUKE.4336 (2) File infector 08/16/99
HLLP.DUKE.4336 (3) File infector 08/16/99
HLLP.DUKE.5200 File infector 08/16/99
HLLP.DUKE.5200 (2) File infector 08/16/99
HLLP.DUKE.5200 (3) File infector 08/16/99
HLLP.DUKE.5280 File infector 08/16/99
HLLP.DUKE.5280 (2) File infector 08/16/99
HLLP.DUKE.5280 (3) File infector 08/16/99
HLLP.FIDOSPY.15000 File infector 07/19/99
HLLP.FIDOSPY.15000(2) File infector 07/19/99
HLLP.HARRY.4696 File infector 07/19/99
HLLP.HARRY.4696(2) File infector 07/19/99
HLLP.HMOK.3783 File infector 08/16/99
HLLP.HMOK.3783 (2) File infector 08/16/99
HLLP.HMOK.3783 (3) File infector 08/16/99
HLLP.MacBeth.5894 File infector 07/19/99
HLLP.Mutant.7489 File infector 08/16/99
HLLP.Mutant.7489 (2) File infector 08/16/99
HLLP.Mutant.7489 (3) File infector 08/16/99
HLLP.Mutant.7489 (v1) File infector 08/16/99
HLLP.Mutant.7489 (v2) File infector 08/16/99
HLLP.Mutant.7489 (v3) File infector 08/16/99
HLLP.Rock.8875 File infector 07/19/99
HLLP.Sysn.10776 File infector 07/19/99
Intended.Armagedon File infector 07/19/99
Intended.DJ.2486 File infector 07/19/99
Intended.Mutation File infector 07/19/99
Intended.Numbless.512 File infector 07/19/99
Intended.Silly.142 File infector 07/19/99
Intended.Tchechen Boot infector 07/19/99
Intended.Trivial.1414 File infector 07/19/99
Intended.Trivial.25 File infector 07/19/99
INTENDED.TRIVIAL.25.c File infector 07/19/99
Intended.Trivial.26 File infector 07/19/99
INTENDED.TRIVIAL.26.D File infector 07/19/99
Intended.Zorm.458 File infector 07/19/99
Intended.Zorm.464 File infector 07/19/99
Intended.Zorm.495 File infector 07/19/99
Intented.Silly.229 File infector 07/19/99
Karag.2764 File infector 07/19/99
KE.627 File infector 08/16/99
Khizhnjak.Beer.1133 File infector 07/19/99
Kitana.114 Boot infector 08/16/99
KKY File infector 07/19/99
Linux.Bliss.b File infector 08/09/99
Mahon.1364 File infector 08/16/99
Nat.4872 Boot infector 07/19/99
Nautilus.1716 File infector 07/19/99
NOBODY.374 File infector 08/02/99
Nutc.Ab2.2000/3000 File infector 08/16/99
Nutcracker Family File infector 08/16/99
Nutcracker Family (2) File infector 08/16/99
Nutcracker Family (3) File infector 08/16/99
Nutcracker Family (4) File infector 08/16/99
Nutcracker.6000/7000 File infector 08/16/99
Nutcracker.Bhd File infector 08/16/99
Olivia.GR.2374 File infector 07/19/99
Olivia.GR.Dropper File infector 07/19/99
Org.Boot Boot infector 07/19/99
Praios.747 File infector 07/26/99
PROH.1454 File infector 08/02/99
PROH.1454 (x) File infector 08/02/99
PWSteal.4564 File infector 08/09/99
PWSteal.4564 (2) File infector 08/09/99
QUAINT.C Boot infector 07/19/99
Rul.336 File infector 08/16/99
SAHAND.2406 File infector 07/19/99
SAMARA.1536 File infector 07/19/99
Samara.1536 (b) Boot infector 07/19/99
SeeYou.A Boot infector 07/19/99
SILLYOC.588 File infector 07/19/99
SVC.1174.Based File infector 07/19/99
SX.749 File infector 07/19/99
SX.749 (2) File infector 07/19/99
Tazman.706 File infector 07/19/99
Termite.6585 File infector 08/02/99
Termite.7800 File infector 08/19/99
Termite.7800 (2) File infector 08/19/99
Tiny.195 File infector 07/19/99
TRIVIAL.121 File infector 07/19/99
TRIVIAL.27.H File infector 08/02/99
TRIVIAL.50D File infector 07/19/99
TRIVIAL.51A File infector 07/19/99
TRIVIAL.52C File infector 07/19/99
TRIVIAL.NOX.255 File infector 08/16/99
Trojan.KillAV File infector 08/09/99
Trojan.KillAV (2) File infector 08/09/99
Trojan.KillAV (3) File infector 08/09/99
Trojan.KillAV (4) File infector 08/09/99
Trojan.Shutdown File infector 08/09/99
Trojan.Shutdown (2) File infector 08/09/99
Trojan.Shutdown (3) File infector 08/09/99
TypeII.988 File infector 07/19/99
Typer.704 File infector 08/19/99
VBS.Monopoly File infector 08/09/99
VCG.1403 File infector 07/19/99
VCG.6609 File infector 07/19/99
VCG.6609.Dropper File infector 07/19/99
VCG.6638 File infector 07/19/99
VCG.6638.Dropper File infector 07/19/99
W32.Bolzano File infector 08/09/99
W32.Bolzano.D File infector 08/16/99
W32.Highway.B File infector 08/16/99
W32.Kriz.3740 File infector 08/16/99
W32.Savior.1680 File infector 08/16/99
W32.Savior.1904 File infector 08/16/99
W32.Slow.8192 File infector 08/16/99
W95.Becoming File infector 07/26/99
W95.Bumble.1738 File infector 08/16/99
W95.CIH.Killer File infector 07/19/99
W95.Fabi.B File infector 08/16/99
W95.Hllp.Mtv File infector 08/16/99
W95.Iced.1412 File infector 08/16/99
W95.Iced.1617 File infector 08/16/99
W95.Iced.2112 File infector 08/16/99
W95.Lud.Jadis.B File infector 08/16/99
W95.Mad.2806 File infector 08/16/99
W95.Manowar File infector 07/26/99
W95.Orez File infector 08/09/99
W95.Sab.512 File infector 08/09/99
W95.Spit File infector 07/26/99
W95.Sysn.Dropper File infector 07/19/99
W95.Weird.Dropper File infector 08/19/99
W95.Werther File infector 08/19/99
W95.Zombie.B (Gen1) File infector 07/26/99
W97M.Akuma.A File infector 08/16/99
W97M.AntiSocial File infector 07/19/99
W97M.Automat.A File infector 08/02/99
W97M.Automat.B File infector 08/02/99
W97M.Automat.H File infector 08/09/99
W97M.Automat.I File infector 08/09/99
W97M.Automat.IY File infector 07/19/99
W97M.Automat.JC File infector 07/19/99
W97M.Automat.K File infector 08/16/99
W97M.Automat.L File infector 08/19/99
W97M.Automat.LX File infector 07/26/99
W97M.Automat.MF File infector 07/26/99
W97M.Automat.N File infector 08/19/99
W97M.Fabi.B File infector 08/16/99
W97M.Fabi.Dropper File infector 08/16/99
W97M.India.C File infector 07/26/99
W97M.IRCJack.B File infector 08/02/99
W97M.Locale.B File infector 08/16/99
W97M.Lulung.B File infector 07/26/99
W97M.Marker.O File infector 07/19/99
W97M.Marker.P File infector 07/26/99
W97M.Marker.Q File infector 07/19/99
W97M.Snrml File infector 08/19/99
W97M.VMPCK1.BM File infector 08/02/99
W97M.VMPCK1.BN File infector 08/02/99
W97M.Wazzu.FR File infector 08/09/99
WIN95.YOUD.1388 File infector 08/16/99
WM.Automat.IX File infector 07/19/99
WM.Automat.JB File infector 07/19/99
WM.Automat.LZ File infector 07/26/99
WUHAN.3289 File infector 07/19/99
WUHAN.3289 (x) File infector 07/19/99
X97M.Automat.F File infector 08/09/99
X97M.Automat.M File infector 08/19/99
X97M.Laroux.FO File infector 07/19/99
X97M.VCX.F File infector 08/16/99
X97M.XLSCAN.A File infector 07/19/99
X97M.Xlscan.b File infector 08/09/99
XM.Automat.C File infector 08/02/99
XM.Automat.D File infector 08/09/99
XM.Automat.G File infector 08/09/99
XM.Automat.IZ File infector 07/19/99
XM.Automat.JM File infector 07/19/99
XM.Automat.LK File infector 07/19/99
XM.Automat.LL File infector 07/19/99
XM.Automat.LW File infector 07/26/99
XM.Laroux.CE.var File infector 08/02/99
XM.Laroux.ES File infector 08/02/99
XM.Laroux.ET File infector 08/09/99
XM.Laroux.JH File infector 08/02/99
XM.Laroux.JU File infector 07/19/99
YLT.2001 File infector 07/19/99
ZORM.1120 File infector 08/16/99
ZORM.1120 (2) File infector 08/16/99
ZORM.1120 (x) File infector 08/16/99
Zyrtec.4300 File infector 07/19/99
Name Changes:
Old Virus Name New Virus Name Date changed
-------------- -------------- ------------
Blankey.STCN to Bloodhound.Unknown 08/09/99
Deltree.Trojan to Deltree Trojan #3 07/26/99
Termite to Termite.5000.A 08/02/99
W32.Kriz.3740 to W32.Kriz 08/19/99
W97M.Automat.B to W97M.Locale.A 08/09/99
W97M.Automat.H to W97M.Cont 08/19/99
WM.Uka.C to WM.Uka.Family 07/19/99
Deletions:
Virus Name Infection Type Date removed
---------- -------------- ------------
HLLP.2783 File infector 07/26/99
HLLP.2783 (2) File infector 07/26/99
HLLT.7909 File infector 07/26/99
HLLT.7909(2) File infector 07/26/99
JOPA8.0 File infector 07/26/99
Olivia.GR.Dropper File infector 08/02/99
PASCASIO.402 File infector 07/26/99
PASCASIO.402(2) File infector 07/26/99
Termite.C File infector 08/02/99
W95.Weird.Dropper File infector 07/26/99
**********************************************************************
** Enabling/Disabling PowerPoint Scanning **
**********************************************************************
PowerPoint Scanning is now enabled by default and can be optionally
disabled. However, you may want to verify that files with
PowerPoint extensions will be scanned by making sure that your
NAV options have both ".PPT" and ".POT" in the list of extensions
to scan.
To disable PowerPoint scanning in NAV for Windows 95/NT
version 4.x or NAV for OS/2, a text file named NAVEX15.INF should
be placed in the directory where NAV 4.x or NAV 5.x is installed
(i.e., C:\Program Files\Norton AntiVirus).
To disable PowerPoint scanning in NAV for Netware version 4.x, a text
file named NAVEX15.INF should be placed in the directory where NAV
4.x is installed (i.e., sys:system\navnlm).
To disable PowerPoint scanning in NAV for Windows 95/NT version 2.0,
NAV 4.x for Windows 3.1/DOS, NAVIEG 1.x, or NAVFW 1.x a text file
named NAVEX.INF should be placed in the directory where NAV is
installed (i.e., C:\NAV).
The contents of the text file, NAVEX15.INF or NAVEX.INF, determine
which components of NAV have PowerPoint scanning disabled.
To disable PowerPoint scanning for a particular component, use the
following table to determine the lines to add to the text file.
PowerPoint scanning can be disabled for more than one component if
needed by adding the required lines for the desired components.
+---------------------+--------------------------+--------------------+
|Windows 95/NT scanner|Windows 95/NT auto-protect|DOS scanner |
+---------------------+--------------------------+--------------------+
|[NAVW32] |[NAVAP] |[NAVDX] |
|PowerPointScanning=0 |PowerPointScanning=0 |PowerPointScanning=0|
+---------------------+--------------------------+--------------------+
+----------------------+--------------------+--------------------+
|Windows 3.1 scanner/AP|Netware scanner |OS/2 scanner/AP |
+----------------------+--------------------+--------------------+
|[NAVWIN] |[NAVNLM] |[NAVOS2] |
|PowerPointScanning=0 |PowerPointScanning=0|PowerPointScanning=0|
+----------------------+--------------------+--------------------+
To enable PowerPoint scanning for a component, delete the lines
added for that component from the NAVEX15.INF or NAVEX.INF file.
**********************************************************************
** Additional Information **
**********************************************************************
SARC has equipped Norton AntiVirus with a new feature called
"Infestation Mode." If a large number of new or unknown viruses
is found on the system during a scan, Norton AntiVirus will
automatically enable its highest level of detection. This gives
users the most comprehensive protection in cases where a viral
infestation may have been detected. If you would like to disable
this feature, you can do so by following these instructions:
1. Create a text File called NAVEX15.INF in your Norton AntiVirus
directory,e.g., C:\Program Files\Norton AntiVirus. If this file
already exist go to step two.
2. Place the following lines in this File on the left-hand margin:
[NAVW32]
infestmode=0
[NAVDX]
infestmode=0
3. Save the File.
Additional information regarding this virus definitions update can be
found in UPDATE.TXT and TECHNOTE.TXT.