********************************************************************** ** ** ** What's New in the NAV Virus Definitions Files WHATSNEW.TXT ** ** ** ** Symantec Security Response June 05, 2003 ** ** ** ********************************************************************** This document contains the following topics: * Virus Alerts * New Technologies * Changes Incorporated Into This Update * Additional Information ********************************************************************** ** Virus Alerts ** ********************************************************************** The ten most commonly reported viruses for March 2003, worldwide: 1 W32.Klez.H@mm 2 Trojan Horse 3 HTML.Redlof.A 4 Backdoor.Dvldr 5 IRC Trojan 6 W95.Hybris.worm 7 W95.Spaces.1445 8 W32.FunLove.4099 9 W32.Nimda.E@mm 10 W32.HLLW.Deloder ********************************************************************** ** New Technologies ** ********************************************************************** DATE Technologies Added ---- ------------------ 08/02/01 * Engine Update 08/02/01 * All products that use the NAVEX 1.5 architecture (in other words, most major Symantec products released over the last 3 - 4 years) will receive the new functionality. * This enhanced technology provides improved script scanning as well as more proactive detection of unknown script-based threats. ********************************************************************** ** Changes Incorporated Into This Virus Definitions Update ** ********************************************************************** DATE ---- New virus definitions (sorted by Virus Name): Virus Name Infection Type Date added ---------- -------------- --------- BAT.ExitWindows.Trojan File infector 06/03/03 BAT.Lafsy File infector 06/03/03 BAT.Mumu.A.Worm File infector 06/03/03 Backdoor.Aoldoor File infector 05/29/03 Backdoor.Apdoor File infector 06/04/03 Backdoor.Assasin.Kit File infector 06/05/03 Backdoor.CIA File infector 05/29/03 Backdoor.Checkesp File infector 06/03/03 Backdoor.Ciadoor.Kit File infector 06/04/03 Backdoor.Evologger File infector 05/30/03 Backdoor.IRC.Comiz File infector 05/29/03 Backdoor.NCX File infector 05/30/03 Backdoor.Rsock File infector 05/30/03 Backdoor.Sequel.Cli File infector 06/05/03 Backdoor.SubSari.Cli File infector 06/05/03 Backdoor.Subhappy File infector 05/30/03 Backdoor.Thunderkiss File infector 05/30/03 Backdoor.Zomrat File infector 05/30/03 Dialer.MoneyTree File infector 06/02/03 HLLC.gen File infector 06/04/03 HLLO.gen File infector 06/04/03 HLLP.gen File infector 06/04/03 Hacktool.BAT File infector 06/04/03 Hacktool.Hacline File infector 06/03/03 Hacktool.Keylogger File infector 05/30/03 Hacktool.SMS.Flooder File infector 06/05/03 Hacktool.Sniffer File infector 06/03/03 IRC.Zierfa.Worm File infector 06/05/03 JS.JSG File infector 06/03/03 Linux.Kitw.Worm File infector 06/03/03 O97M.Cian.D@mm File infector 05/29/03 PWSteal.ABCHlp File infector 06/05/03 PWSteal.Lemir.Gen File infector 05/29/03 PWSteal.Lemir.Kit File infector 05/29/03 PWSteal.Minild File infector 05/29/03 PWSteal.Minild.Cli File infector 05/29/03 PWSteal.Sysrater File infector 06/02/03 Perl.Dir.Worm File infector 05/29/03 Perl.Intender File infector 05/29/03 REG.Radar File infector 06/03/03 SillyC.246.b File infector 05/30/03 Trojan.Ansibomb.Kit File infector 06/04/03 Trojan.Cian.D File infector 05/29/03 Trojan.ConstructKit File infector 06/04/03 Trojan.FakeLogin.Gen File infector 06/01/03 Trojan.FakeLogin.Kit File infector 06/01/03 Trojan.Godwil.Kit File infector 06/04/03 Trojan.MontKiller File infector 06/01/03 Trojan.Mood File infector 06/01/03 Trojan.Myet File infector 06/02/03 Trojan.OICQRec File infector 06/01/03 Trojan.Perry File infector 05/30/03 Trojan.Prank File infector 06/01/03 VBS.Apmas File infector 05/29/03 VBS.Breeder@mm File infector 05/29/03 VBS.Kding@mm File infector 06/05/03 VBS.Marata File infector 06/05/03 VBS.Purify@mm File infector 06/02/03 VBS.Radnet File infector 06/05/03 VBS.Xolox File infector 06/05/03 VBS.Zuoning@mm File infector 06/05/03 W32.Bajos File infector 06/03/03 W32.Bildan.Irc File infector 06/03/03 W32.Bugbear.B@mm File infector 06/05/03 W32.Celebite.Worm File infector 06/03/03 W32.Delanab.Worm File infector 06/05/03 W32.Erah.A@mm File infector 05/30/03 W32.Femot.Worm File infector 06/04/03 W32.Gener.Worm File infector 06/03/03 W32.HLLP.65542 File infector 05/29/03 W32.HLLP.Arcer File infector 06/03/03 W32.HLLP.Sality File infector 06/05/03 W32.HLLW.Benfgame.B File infector 06/02/03 W32.HLLW.Lovgate.K@mm File infector 06/03/03 W32.HLLW.Magold@mm File infector 05/30/03 W32.HLLW.Neoval File infector 06/05/03 W32.HLLW.Nool@mm File infector 06/05/03 W32.HLLW.Potomac File infector 06/05/03 W32.HLLW.Povgon File infector 06/03/03 W32.HLLW.Redist.B@mm File infector 05/30/03 W32.HLLW.Spirit File infector 06/01/03 W32.HLLW.Ssdx File infector 05/30/03 W32.HLLW.Sysdil File infector 06/05/03 W32.HLLW.Veedna.C File infector 05/30/03 W32.HLLW.Xolox@mm File infector 06/05/03 W32.Jeefo File infector 06/03/03 W32.Lagold.Irc File infector 06/03/03 W32.Lamza File infector 06/03/03 W32.Miriam.Worm File infector 06/05/03 W32.Naco.C@mm File infector 06/02/03 W32.Noclaf.Gen File infector 05/29/03 W32.Randex File infector 06/05/03 W32.Sint@mm File infector 06/03/03 W32.Sobig.C@mm File infector 06/01/03 W32.Supova.C.Worm File infector 06/03/03 W32.Tuloma.8364 File infector 05/30/03 W32.Yopper File infector 06/03/03 W97M.MYF File infector 06/05/03 W97M.Radnet File infector 06/05/03 W97M.Tchau File infector 05/30/03 New virus definitions (sorted by Date added): Virus Name Infection Type Date added ---------- -------------- ---------- Backdoor.Assasin.Kit File infector 06/05/03 Backdoor.Sequel.Cli File infector 06/05/03 Backdoor.SubSari.Cli File infector 06/05/03 Hacktool.SMS.Flooder File infector 06/05/03 IRC.Zierfa.Worm File infector 06/05/03 PWSteal.ABCHlp File infector 06/05/03 VBS.Kding@mm File infector 06/05/03 VBS.Marata File infector 06/05/03 VBS.Radnet File infector 06/05/03 VBS.Xolox File infector 06/05/03 VBS.Zuoning@mm File infector 06/05/03 W32.Bugbear.B@mm File infector 06/05/03 W32.Delanab.Worm File infector 06/05/03 W32.HLLP.Sality File infector 06/05/03 W32.HLLW.Neoval File infector 06/05/03 W32.HLLW.Nool@mm File infector 06/05/03 W32.HLLW.Potomac File infector 06/05/03 W32.HLLW.Sysdil File infector 06/05/03 W32.HLLW.Xolox@mm File infector 06/05/03 W32.Miriam.Worm File infector 06/05/03 W32.Randex File infector 06/05/03 W97M.MYF File infector 06/05/03 W97M.Radnet File infector 06/05/03 Backdoor.Apdoor File infector 06/04/03 Backdoor.Ciadoor.Kit File infector 06/04/03 HLLC.gen File infector 06/04/03 HLLO.gen File infector 06/04/03 HLLP.gen File infector 06/04/03 Hacktool.BAT File infector 06/04/03 Trojan.Ansibomb.Kit File infector 06/04/03 Trojan.ConstructKit File infector 06/04/03 Trojan.Godwil.Kit File infector 06/04/03 W32.Femot.Worm File infector 06/04/03 BAT.ExitWindows.Trojan File infector 06/03/03 BAT.Lafsy File infector 06/03/03 BAT.Mumu.A.Worm File infector 06/03/03 Backdoor.Checkesp File infector 06/03/03 Hacktool.Hacline File infector 06/03/03 Hacktool.Sniffer File infector 06/03/03 JS.JSG File infector 06/03/03 Linux.Kitw.Worm File infector 06/03/03 REG.Radar File infector 06/03/03 W32.Bajos File infector 06/03/03 W32.Bildan.Irc File infector 06/03/03 W32.Celebite.Worm File infector 06/03/03 W32.Gener.Worm File infector 06/03/03 W32.HLLP.Arcer File infector 06/03/03 W32.HLLW.Lovgate.K@mm File infector 06/03/03 W32.HLLW.Povgon File infector 06/03/03 W32.Jeefo File infector 06/03/03 W32.Lagold.Irc File infector 06/03/03 W32.Lamza File infector 06/03/03 W32.Sint@mm File infector 06/03/03 W32.Supova.C.Worm File infector 06/03/03 W32.Yopper File infector 06/03/03 Dialer.MoneyTree File infector 06/02/03 PWSteal.Sysrater File infector 06/02/03 Trojan.Myet File infector 06/02/03 VBS.Purify@mm File infector 06/02/03 W32.HLLW.Benfgame.B File infector 06/02/03 W32.Naco.C@mm File infector 06/02/03 Trojan.FakeLogin.Gen File infector 06/01/03 Trojan.FakeLogin.Kit File infector 06/01/03 Trojan.MontKiller File infector 06/01/03 Trojan.Mood File infector 06/01/03 Trojan.OICQRec File infector 06/01/03 Trojan.Prank File infector 06/01/03 W32.HLLW.Spirit File infector 06/01/03 W32.Sobig.C@mm File infector 06/01/03 Backdoor.Evologger File infector 05/30/03 Backdoor.NCX File infector 05/30/03 Backdoor.Rsock File infector 05/30/03 Backdoor.Subhappy File infector 05/30/03 Backdoor.Thunderkiss File infector 05/30/03 Backdoor.Zomrat File infector 05/30/03 Hacktool.Keylogger File infector 05/30/03 SillyC.246.b File infector 05/30/03 Trojan.Perry File infector 05/30/03 W32.Erah.A@mm File infector 05/30/03 W32.HLLW.Magold@mm File infector 05/30/03 W32.HLLW.Redist.B@mm File infector 05/30/03 W32.HLLW.Ssdx File infector 05/30/03 W32.HLLW.Veedna.C File infector 05/30/03 W32.Tuloma.8364 File infector 05/30/03 W97M.Tchau File infector 05/30/03 Backdoor.Aoldoor File infector 05/29/03 Backdoor.CIA File infector 05/29/03 Backdoor.IRC.Comiz File infector 05/29/03 O97M.Cian.D@mm File infector 05/29/03 PWSteal.Lemir.Gen File infector 05/29/03 PWSteal.Lemir.Kit File infector 05/29/03 PWSteal.Minild File infector 05/29/03 PWSteal.Minild.Cli File infector 05/29/03 Perl.Dir.Worm File infector 05/29/03 Perl.Intender File infector 05/29/03 Trojan.Cian.D File infector 05/29/03 VBS.Apmas File infector 05/29/03 VBS.Breeder@mm File infector 05/29/03 W32.HLLP.65542 File infector 05/29/03 W32.Noclaf.Gen File infector 05/29/03 Name Changes (sorted by Old Virus Name): Old Virus Name New Virus Name Date changed -------------- -------------- ------------ Backdoor.Cjmspy.A to Backdoor.IRC.Microb 05/18/03 Backdoor.Coldfusion to Backdoor.Colfusion 05/30/03 Backdoor.Corrupt to Backdoor.Aimfrm 05/18/03 Backdoor.Corrupt.Cli to Backdoor.Vision 05/18/03 Backdoor.Shareme to Backdoor.CyJack.Cli 05/18/03 Bin.Auto.CAS to AVCS.268.b 05/16/03 Bin.Auto.CAT to ATB.1522.B 05/16/03 Bin.Auto.CAU to AVCS.273.a 05/16/03 Bin.Auto.CAV to Destructor.421 05/16/03 Bin.Auto.CAW to AVCS.273.b 05/16/03 Bin.Auto.CAX to AVCS.276 05/16/03 Bin.Auto.CAY to Baba.386 05/16/03 Bin.Auto.CAZ to Baba.434.b 05/16/03 Bin.Auto.CBA to Baba.432 05/16/03 Bin.Auto.CBB to Baba.470.b 05/16/03 Bin.Auto.CBC to BW.Baddie.1252 05/16/03 Bin.Auto.CBD to Badcom.458 05/16/03 Bin.Auto.CBE to Barotes.1310.j 05/16/03 Bin.Auto.CBF to Btown.666 05/16/03 Bin.Auto.CBG to Btown.657 05/16/03 Bin.Auto.CBH to Btown.663 05/16/03 Bin.Auto.CBI to Btown.660 05/16/03 Bin.Auto.CBJ to Btown.669 05/16/03 Bin.Auto.CBK to Btown.675 05/16/03 Bin.Auto.CBL to Btown.678 05/16/03 Bin.Auto.CBM to Btown.681 05/16/03 Bin.Auto.CBN to Btown.687 05/16/03 Bin.Auto.CBO to BDaddy.1321 05/16/03 Bin.Auto.CBP to Vicky.Demon.1186 05/16/03 Bin.Auto.CBQ to Vicky.Demon.304 05/16/03 Bin.Auto.CBR to VCG.Belka.854 05/16/03 Bin.Auto.CBS to VCG.Belka.862 05/16/03 Bin.Auto.CBT to Aref.890 05/16/03 Bin.Auto.CBU to Biohazard.828 05/16/03 Bin.Auto.CBV to Birgit.310 05/16/03 Bin.Auto.CBW to lackJec.267.b 05/16/03 Bin.Auto.CBX to BlackJec.231.e 05/16/03 Bin.Auto.CBY to BlackJec.398 05/16/03 Bin.Auto.CBZ to BlackJec.247.g 05/16/03 Bin.Auto.CCA to BlackJec.287.b 05/16/03 Bin.Auto.CCB to Bolero.1100.b 05/16/03 Bin.Auto.CCC to Burn.285 05/16/03 Bin.Auto.CCD to Bolero.1254 05/16/03 Bin.Auto.CCE to BW.1102 05/16/03 Bin.Auto.CCF to BusMouse.3072 05/16/03 Bin.Auto.CCG to BW.Inv.1308 05/16/03 O97M.Cian.D@mm to O97M.Cian.D 05/30/03 W32.Boa.Worm to Trojan.Boa 06/05/03 W32.HLLW.Mankx@mm to W32.Sobig.B@mm 05/22/03 W32.Perenast.15773.int to W32.Perenast.gen 05/30/03 Name Changes (sorted by Date changed): Old Virus Name New Virus Name Date changed -------------- -------------- ------------ W32.Boa.Worm to Trojan.Boa 06/05/03 Backdoor.Coldfusion to Backdoor.Colfusion 05/30/03 O97M.Cian.D@mm to O97M.Cian.D 05/30/03 W32.Perenast.15773.int to W32.Perenast.gen 05/30/03 W32.HLLW.Mankx@mm to W32.Sobig.B@mm 05/22/03 Backdoor.Cjmspy.A to Backdoor.IRC.Microb 05/18/03 Backdoor.Corrupt to Backdoor.Aimfrm 05/18/03 Backdoor.Corrupt.Cli to Backdoor.Vision 05/18/03 Backdoor.Shareme to Backdoor.CyJack.Cli 05/18/03 Bin.Auto.CAS to AVCS.268.b 05/16/03 Bin.Auto.CAT to ATB.1522.B 05/16/03 Bin.Auto.CAU to AVCS.273.a 05/16/03 Bin.Auto.CAV to Destructor.421 05/16/03 Bin.Auto.CAW to AVCS.273.b 05/16/03 Bin.Auto.CAX to AVCS.276 05/16/03 Bin.Auto.CAY to Baba.386 05/16/03 Bin.Auto.CAZ to Baba.434.b 05/16/03 Bin.Auto.CBA to Baba.432 05/16/03 Bin.Auto.CBB to Baba.470.b 05/16/03 Bin.Auto.CBC to BW.Baddie.1252 05/16/03 Bin.Auto.CBD to Badcom.458 05/16/03 Bin.Auto.CBE to Barotes.1310.j 05/16/03 Bin.Auto.CBF to Btown.666 05/16/03 Bin.Auto.CBG to Btown.657 05/16/03 Bin.Auto.CBH to Btown.663 05/16/03 Bin.Auto.CBI to Btown.660 05/16/03 Bin.Auto.CBJ to Btown.669 05/16/03 Bin.Auto.CBK to Btown.675 05/16/03 Bin.Auto.CBL to Btown.678 05/16/03 Bin.Auto.CBM to Btown.681 05/16/03 Bin.Auto.CBN to Btown.687 05/16/03 Bin.Auto.CBO to BDaddy.1321 05/16/03 Bin.Auto.CBP to Vicky.Demon.1186 05/16/03 Bin.Auto.CBQ to Vicky.Demon.304 05/16/03 Bin.Auto.CBR to VCG.Belka.854 05/16/03 Bin.Auto.CBS to VCG.Belka.862 05/16/03 Bin.Auto.CBT to Aref.890 05/16/03 Bin.Auto.CBU to Biohazard.828 05/16/03 Bin.Auto.CBV to Birgit.310 05/16/03 Bin.Auto.CBW to lackJec.267.b 05/16/03 Bin.Auto.CBX to BlackJec.231.e 05/16/03 Bin.Auto.CBY to BlackJec.398 05/16/03 Bin.Auto.CBZ to BlackJec.247.g 05/16/03 Bin.Auto.CCA to BlackJec.287.b 05/16/03 Bin.Auto.CCB to Bolero.1100.b 05/16/03 Bin.Auto.CCC to Burn.285 05/16/03 Bin.Auto.CCD to Bolero.1254 05/16/03 Bin.Auto.CCE to BW.1102 05/16/03 Bin.Auto.CCF to BusMouse.3072 05/16/03 Bin.Auto.CCG to BW.Inv.1308 05/16/03 Deletions (sorted by Virus Name): Virus Name Infection Type Date removed ---------- -------------- ------------ Backdoor.IRC.Microb File infector 05/18/03 Adware.BDE File infector 04/30/03 Adware.BargainBuddy File infector 04/30/03 Adware.CommonName File infector 04/30/03 Adware.Cydoor File infector 04/30/03 Adware.Dware File infector 04/30/03 Adware.Exactbar File infector 04/30/03 Adware.Flashtrack File infector 04/30/03 Adware.Flyswat File infector 04/30/03 Adware.Gator File infector 04/30/03 Backdoor.Corrupt.Kit File infector 05/18/03 Backdoor.CyJack File infector 05/18/03 Backdoor.CyJack.Cli File infector 05/18/03 Backdoor.IRCScript.Fld File infector 05/08/03 Backdoor.IRCScript.Gen File infector 05/08/03 Bin.Auto.CCY File infector 05/08/03 Bin.Auto.CJY File infector 05/19/03 PDF.Virus File infector 05/01/03 PDF.Yourde File infector 05/06/03 VBS.Charl File infector 05/02/03 Deletions (sorted by Date removed): Virus Name Infection Type Date removed ---------- -------------- ------------ Bin.Auto.CJY File infector 05/19/03 Backdoor.IRC.Microb File infector 05/18/03 Backdoor.Corrupt.Kit File infector 05/18/03 Backdoor.CyJack File infector 05/18/03 Backdoor.CyJack.Cli File infector 05/18/03 Backdoor.IRCScript.Fld File infector 05/08/03 Backdoor.IRCScript.Gen File infector 05/08/03 Bin.Auto.CCY File infector 05/08/03 PDF.Yourde File infector 05/06/03 VBS.Charl File infector 05/02/03 PDF.Virus File infector 05/01/03 Adware.BDE File infector 04/30/03 Adware.BargainBuddy File infector 04/30/03 Adware.CommonName File infector 04/30/03 Adware.Cydoor File infector 04/30/03 Adware.Dware File infector 04/30/03 Adware.Exactbar File infector 04/30/03 Adware.Flashtrack File infector 04/30/03 Adware.Flyswat File infector 04/30/03 Adware.Gator File infector 04/30/03 ********************************************************************** ** Additional Information ** ********************************************************************** Additional information regarding this virus definitions update can be found in UPDATE.TXT and TECHNOTE.TXT.