********************************************************************** ** ** ** What's New in the NAV Virus Definitions Files WHATSNEW.TXT ** ** ** ** Symantec Security Response July 01, 2004 ** ** ** ********************************************************************** This document contains the following topics: * Virus Alerts * Changes Incorporated Into This Update * Additional Information ********************************************************************** ** Virus Alerts ** ********************************************************************** The ten most commonly reported viruses for April 2004, worldwide: 1 Trojan Horse 2 W32.HLLW.Gaobot.gen 3 W32.Netsky.P@mm 4 W32.Beagle.M@mm 5 W32.Netsky.D@mm 6 W32.Bugbear.B@mm 7 W32.Netsky.Y@mm 8 W32.Netsky.C@mm 9 VBS.Redlof.A 10 W32.Randex.gen ********************************************************************** ** Changes Incorporated Into This Virus Definitions Update ** ********************************************************************** DATE ---- New virus definitions (sorted by Virus Name): Virus Name Infection Type Date added ---------- -------------- --------- ARCV.968 File infector 06/21/04 Adware.180Search File infector 06/15/04 Adware.Admass File infector 06/19/04 Adware.DealHelper File infector 06/29/04 Adware.EnergyPlugin File infector 06/13/04 Adware.GatorClone File infector 06/26/04 Adware.Inetex File infector 06/29/04 Adware.Lamhok File infector 06/16/04 Adware.LizardBar File infector 06/13/04 Adware.MediaLoad File infector 06/29/04 Adware.QoolAid File infector 06/18/04 Adware.SearchMall File infector 06/20/04 Adware.ShowBehind File infector 07/01/04 Adware.SmartPops File infector 06/29/04 Adware.WinAd File infector 06/18/04 Already.71 File infector 06/17/04 Backdoor.Berbew.E File infector 06/09/04 Backdoor.Berbew.F File infector 06/22/04 Backdoor.Berbew.G File infector 06/26/04 Backdoor.Botex File infector 06/27/04 Backdoor.Hacarmy.C File infector 06/21/04 Backdoor.Hacarmy.D File infector 06/27/04 Backdoor.Nibu.H File infector 06/17/04 Backdoor.Ranky.G File infector 06/21/04 Backdoor.Remnet File infector 06/13/04 Bloodhound.Exploit.10 File infector 06/10/04 Dialer.Hoterotik File infector 06/17/04 Dialer.Inproc File infector 06/21/04 Dialer.LetToPhone File infector 06/19/04 Dialer.Vesta File infector 06/18/04 Dimo.1051 File infector 06/24/04 Download.Ject File infector 06/15/04 EPOC.Cabir File infector 06/15/04 Elf File infector 06/25/04 Fleeing.1986 File infector 06/27/04 Ingene File infector 06/25/04 JS.Scob.Trojan File infector 06/24/04 JS.Scob.Trojan!inf File infector 06/24/04 Jakarta.1194 File infector 06/27/04 Joke.Bounce File infector 06/27/04 Koder.1748 File infector 06/22/04 Linux.Adrastea File infector 06/16/04 Linux.Amalthea File infector 06/16/04 Linux.Cassini File infector 06/16/04 Linux.Debilove File infector 06/10/04 Linux.Metis File infector 06/16/04 Linux.Thebe File infector 06/16/04 PWSteal.Bamer.A File infector 06/16/04 PWSteal.Banker.B File infector 06/17/04 PWSteal.Refest File infector 06/30/04 Spyware.AbsoluteKey File infector 06/21/04 Spyware.BrowserAccel File infector 06/21/04 Spyware.GoldenEye File infector 06/29/04 Spyware.InTheKnow File infector 06/21/04 Spyware.KsLogger File infector 06/30/04 Spyware.NTLogonCapture File infector 06/09/04 Spyware.SilentSpy File infector 06/11/04 Spyware.SpyCapture File infector 06/29/04 Spyware.WinWhatWhere File infector 07/01/04 Trojan.Ascetic.A File infector 06/14/04 Trojan.Boxed.A File infector 06/15/04 Trojan.Boxed.B File infector 06/15/04 Trojan.Boxed.C File infector 06/28/04 Trojan.Boxed.D File infector 06/28/04 Trojan.Chost File infector 06/27/04 Trojan.Ecure File infector 06/29/04 Trojan.Errhijack File infector 06/28/04 Trojan.Gletta.A File infector 06/09/04 Trojan.Scob!dr File infector 06/25/04 Trojan.Wintrash File infector 06/17/04 VCG.1319 File infector 06/21/04 Veronika.1440 File infector 06/27/04 W32.Ainesey.A@mm File infector 06/29/04 W32.Ainesey.A@mm (vbs) File infector 06/29/04 W32.Bugbear.K@mm File infector 06/26/04 W32.Doep.A File infector 06/30/04 W32.Erkez.B@mm File infector 06/11/04 W32.Erkez.B@mm (unp) File infector 06/14/04 W32.Erkez.B@mm (unp2) File infector 06/14/04 W32.Funlove.C File infector 06/15/04 W32.Gaobot.AUS File infector 06/28/04 W32.Korgo!gen File infector 06/22/04 W32.Korgo.L File infector 06/17/04 W32.Korgo.M File infector 06/21/04 W32.Korgo.N File infector 06/21/04 W32.Korgo.O File infector 06/22/04 W32.Korgo.P File infector 06/22/04 W32.Korgo.Q File infector 06/24/04 W32.Korgo.R File infector 06/24/04 W32.Lovgate.X@mm File infector 07/01/04 W32.Paps.A@mm File infector 06/13/04 W32.Randex.ATS File infector 06/23/04 W32.Randex.ATX File infector 06/28/04 W32.Sasser.G File infector 06/11/04 W32.Sober.H@mm File infector 06/11/04 W97M.Anisc File infector 06/17/04 W97M.MLHR File infector 06/17/04 Win.Winp (1) File infector 06/25/04 Worm.Automat.AHP File infector 06/09/04 XRCE.145 File infector 06/19/04 New virus definitions (sorted by Date added): Virus Name Infection Type Date added ---------- -------------- ---------- Adware.ShowBehind File infector 07/01/04 Spyware.WinWhatWhere File infector 07/01/04 W32.Lovgate.X@mm File infector 07/01/04 PWSteal.Refest File infector 06/30/04 Spyware.KsLogger File infector 06/30/04 W32.Doep.A File infector 06/30/04 Adware.DealHelper File infector 06/29/04 Adware.Inetex File infector 06/29/04 Adware.MediaLoad File infector 06/29/04 Adware.SmartPops File infector 06/29/04 Spyware.GoldenEye File infector 06/29/04 Spyware.SpyCapture File infector 06/29/04 Trojan.Ecure File infector 06/29/04 W32.Ainesey.A@mm File infector 06/29/04 W32.Ainesey.A@mm (vbs) File infector 06/29/04 Trojan.Boxed.C File infector 06/28/04 Trojan.Boxed.D File infector 06/28/04 Trojan.Errhijack File infector 06/28/04 W32.Gaobot.AUS File infector 06/28/04 W32.Randex.ATX File infector 06/28/04 Backdoor.Botex File infector 06/27/04 Backdoor.Hacarmy.D File infector 06/27/04 Fleeing.1986 File infector 06/27/04 Jakarta.1194 File infector 06/27/04 Joke.Bounce File infector 06/27/04 Trojan.Chost File infector 06/27/04 Veronika.1440 File infector 06/27/04 Adware.GatorClone File infector 06/26/04 Backdoor.Berbew.G File infector 06/26/04 W32.Bugbear.K@mm File infector 06/26/04 Elf File infector 06/25/04 Ingene File infector 06/25/04 Trojan.Scob!dr File infector 06/25/04 Win.Winp (1) File infector 06/25/04 Dimo.1051 File infector 06/24/04 JS.Scob.Trojan File infector 06/24/04 JS.Scob.Trojan!inf File infector 06/24/04 W32.Korgo.Q File infector 06/24/04 W32.Korgo.R File infector 06/24/04 W32.Randex.ATS File infector 06/23/04 Backdoor.Berbew.F File infector 06/22/04 Koder.1748 File infector 06/22/04 W32.Korgo!gen File infector 06/22/04 W32.Korgo.O File infector 06/22/04 W32.Korgo.P File infector 06/22/04 ARCV.968 File infector 06/21/04 Backdoor.Hacarmy.C File infector 06/21/04 Backdoor.Ranky.G File infector 06/21/04 Dialer.Inproc File infector 06/21/04 Spyware.AbsoluteKey File infector 06/21/04 Spyware.BrowserAccel File infector 06/21/04 Spyware.InTheKnow File infector 06/21/04 VCG.1319 File infector 06/21/04 W32.Korgo.M File infector 06/21/04 W32.Korgo.N File infector 06/21/04 Adware.SearchMall File infector 06/20/04 Adware.Admass File infector 06/19/04 Dialer.LetToPhone File infector 06/19/04 XRCE.145 File infector 06/19/04 Adware.QoolAid File infector 06/18/04 Adware.WinAd File infector 06/18/04 Dialer.Vesta File infector 06/18/04 Already.71 File infector 06/17/04 Backdoor.Nibu.H File infector 06/17/04 Dialer.Hoterotik File infector 06/17/04 PWSteal.Banker.B File infector 06/17/04 Trojan.Wintrash File infector 06/17/04 W32.Korgo.L File infector 06/17/04 W97M.Anisc File infector 06/17/04 W97M.MLHR File infector 06/17/04 Adware.Lamhok File infector 06/16/04 Linux.Adrastea File infector 06/16/04 Linux.Amalthea File infector 06/16/04 Linux.Cassini File infector 06/16/04 Linux.Metis File infector 06/16/04 Linux.Thebe File infector 06/16/04 PWSteal.Bamer.A File infector 06/16/04 Adware.180Search File infector 06/15/04 Download.Ject File infector 06/15/04 EPOC.Cabir File infector 06/15/04 Trojan.Boxed.A File infector 06/15/04 Trojan.Boxed.B File infector 06/15/04 W32.Funlove.C File infector 06/15/04 Trojan.Ascetic.A File infector 06/14/04 W32.Erkez.B@mm (unp) File infector 06/14/04 W32.Erkez.B@mm (unp2) File infector 06/14/04 Adware.EnergyPlugin File infector 06/13/04 Adware.LizardBar File infector 06/13/04 Backdoor.Remnet File infector 06/13/04 W32.Paps.A@mm File infector 06/13/04 Spyware.SilentSpy File infector 06/11/04 W32.Erkez.B@mm File infector 06/11/04 W32.Sasser.G File infector 06/11/04 W32.Sober.H@mm File infector 06/11/04 Bloodhound.Exploit.10 File infector 06/10/04 Linux.Debilove File infector 06/10/04 Backdoor.Berbew.E File infector 06/09/04 Spyware.NTLogonCapture File infector 06/09/04 Trojan.Gletta.A File infector 06/09/04 Worm.Automat.AHP File infector 06/09/04 Name Changes (sorted by Old Virus Name): Old Virus Name New Virus Name Date changed -------------- -------------- ------------ Backdoor.Padodor to Backdoor.Berbew.D 04/21/04 Backdoor.Sdbot.U to Backdoor.Sdbot.Y 04/23/04 Backdoor.Skobie.A to Spyware.FamilyKeylog 05/02/04 EPOC.Cabir to SymbOS.Cabir 06/21/04 JS.Offiz to Trojan.Offiz 06/21/04 O97M.Tristate.Variant to O97M.Tristate.B 06/04/04 PWSteal.Skobie to Spyware.SpyAgent 05/12/04 PWSteal.Skobie.B to Backdoor.Haxdoor.B 05/20/04 PWSteal.Skobie.C to W32.Gaobot.ALV 05/25/04 Trojan.Ascetic.A to W32.Erkez.B@mm (2) 06/14/04 Trojan.Simcss.B to Adware.Slagent 04/26/04 W32.Ainesey.A@mm (vbs) to W32.Ainesey.A@mm!vbs 06/30/04 W32.Bobax.A to W32.Bobax.B 05/19/04 W32.Dumaru.AJ@mm to Backdoor.Nibu.F 05/18/04 W32.HLLW.Antinny.L to Trojan.Upbit 05/23/04 W32.HLLW.Gearbug@mm to W32.Bugbros.B@mm 04/26/04 W32.Korgo.H to W32.Korgo.I 06/29/04 W32.Korgo.I to W32.Korgo.N 06/29/04 W32.Korgo.M to W32.Korgo.S 06/28/04 W32.Korgo.N to W32.Korgo.T 06/28/04 W32.Korgo.O to W32.Korgo.U 06/28/04 W32.Korgo.Q to W32.Korgo.V 06/28/04 W32.Mintop@mm to W32.Bigfairy.C@mm 04/19/04 W32.Netsup@mm to W32.Netsup.A@mm 05/31/04 W32.Randex.XU to Trojan.Niska 04/18/04 W32.Sober.H@mm to Trojan.Ascetic.A 06/12/04 W97.Saver.H to W97M.Saver.H 05/07/04 WM.Not_a_virus to WM.Schupfl 06/21/04 Name Changes (sorted by Date changed): Old Virus Name New Virus Name Date changed -------------- -------------- ------------ W32.Ainesey.A@mm (vbs) to W32.Ainesey.A@mm!vbs 06/30/04 W32.Korgo.H to W32.Korgo.I 06/29/04 W32.Korgo.I to W32.Korgo.N 06/29/04 W32.Korgo.M to W32.Korgo.S 06/28/04 W32.Korgo.N to W32.Korgo.T 06/28/04 W32.Korgo.O to W32.Korgo.U 06/28/04 W32.Korgo.Q to W32.Korgo.V 06/28/04 EPOC.Cabir to SymbOS.Cabir 06/21/04 JS.Offiz to Trojan.Offiz 06/21/04 WM.Not_a_virus to WM.Schupfl 06/21/04 Trojan.Ascetic.A to W32.Erkez.B@mm (2) 06/14/04 W32.Sober.H@mm to Trojan.Ascetic.A 06/12/04 O97M.Tristate.Variant to O97M.Tristate.B 06/04/04 W32.Netsup@mm to W32.Netsup.A@mm 05/31/04 PWSteal.Skobie.C to W32.Gaobot.ALV 05/25/04 W32.HLLW.Antinny.L to Trojan.Upbit 05/23/04 PWSteal.Skobie.B to Backdoor.Haxdoor.B 05/20/04 W32.Bobax.A to W32.Bobax.B 05/19/04 W32.Dumaru.AJ@mm to Backdoor.Nibu.F 05/18/04 PWSteal.Skobie to Spyware.SpyAgent 05/12/04 W97.Saver.H to W97M.Saver.H 05/07/04 Backdoor.Skobie.A to Spyware.FamilyKeylog 05/02/04 Trojan.Simcss.B to Adware.Slagent 04/26/04 W32.HLLW.Gearbug@mm to W32.Bugbros.B@mm 04/26/04 Backdoor.Sdbot.U to Backdoor.Sdbot.Y 04/23/04 Backdoor.Padodor to Backdoor.Berbew.D 04/21/04 W32.Mintop@mm to W32.Bigfairy.C@mm 04/19/04 W32.Randex.XU to Trojan.Niska 04/18/04 Deletions (sorted by Virus Name): Virus Name Infection Type Date removed ---------- -------------- ------------ A2K.Damcor File infector 05/19/04 Already.71 File infector 06/17/04 Backdoor.Anyserv.B File infector 04/21/04 Dialer.Goin File infector 06/05/04 Linux.Metis File infector 06/17/04 Linux.Thebe File infector 06/17/04 W32.Gaobot!inf File infector 05/03/04 W32.Korgo!gen File infector 06/23/04 W32.Korgo.L File infector 06/17/04 W32.Korgo.P File infector 06/23/04 W32.Randex.ATS File infector 06/23/04 W32.Sasser.G File infector 06/13/04 Worm.Automat.AHL File infector 04/19/04 Worm.Automat.AHM File infector 05/19/04 Worm.Automat.AHN File infector 05/19/04 Deletions (sorted by Date removed): Virus Name Infection Type Date removed ---------- -------------- ------------ W32.Korgo!gen File infector 06/23/04 W32.Korgo.P File infector 06/23/04 W32.Randex.ATS File infector 06/23/04 Already.71 File infector 06/17/04 Linux.Metis File infector 06/17/04 Linux.Thebe File infector 06/17/04 W32.Korgo.L File infector 06/17/04 W32.Sasser.G File infector 06/13/04 Dialer.Goin File infector 06/05/04 A2K.Damcor File infector 05/19/04 Worm.Automat.AHM File infector 05/19/04 Worm.Automat.AHN File infector 05/19/04 W32.Gaobot!inf File infector 05/03/04 Backdoor.Anyserv.B File infector 04/21/04 Worm.Automat.AHL File infector 04/19/04 ********************************************************************** ** Additional Information ** ********************************************************************** Additional information regarding this virus definitions update can be found in UPDATE.TXT and TECHNOTE.TXT.