********************************************************************** ** ** ** What's New in the NAV Virus Definitions Files WHATSNEW.TXT ** ** ** ** Symantec Security Response June 13, 2004 ** ** ** ********************************************************************** This document contains the following topics: * Virus Alerts * Changes Incorporated Into This Update * Additional Information ********************************************************************** ** Virus Alerts ** ********************************************************************** The ten most commonly reported viruses for April 2004, worldwide: 1 Trojan Horse 2 W32.HLLW.Gaobot.gen 3 W32.Netsky.P@mm 4 W32.Beagle.M@mm 5 W32.Netsky.D@mm 6 W32.Bugbear.B@mm 7 W32.Netsky.Y@mm 8 W32.Netsky.C@mm 9 VBS.Redlof.A 10 W32.Randex.gen ********************************************************************** ** Changes Incorporated Into This Virus Definitions Update ** ********************************************************************** DATE ---- New virus definitions (sorted by Virus Name): Virus Name Infection Type Date added ---------- -------------- --------- Adware.AdDestroyer File infector 06/04/04 Adware.BrowserAid File infector 06/07/04 Adware.Huntbar File infector 06/07/04 Adware.SearchNew File infector 06/04/04 Adware.SurfAssistant File infector 06/07/04 Adware.Surfairy File infector 06/07/04 Adware.WinFavorites.B File infector 05/25/04 Adware.WinFetch File infector 06/01/04 BAT.Sebak File infector 05/28/04 Backdoor.Berbew.E File infector 06/09/04 Backdoor.Ducy File infector 06/07/04 Backdoor.IRC.Aladinz.R File infector 06/03/04 Backdoor.Mtron File infector 05/27/04 Backdoor.Nibu.G File infector 06/03/04 Backdoor.Remnet File infector 06/13/04 Bloodhound.Exploit.10 File infector 06/10/04 Dialer.DialPlatform File infector 06/01/04 Dialer.Goin File infector 06/05/04 Dialer.Intexus File infector 05/31/04 Dialer.Mejorbus File infector 05/31/04 Dialer.QuestNet File infector 05/31/04 Dialer.Wingoon File infector 06/07/04 Hacktool.Exe2Bmp File infector 06/07/04 Linux.Debilove File infector 06/10/04 O97M.Dieingseas.A File infector 06/07/04 PWSteal.Etavirp.A File infector 06/08/04 Remacc.Lanstar File infector 05/31/04 Spyware.NTLogonCapture File infector 06/09/04 Spyware.SilentSpy File infector 06/11/04 Trojan.Dingsta.A File infector 06/08/04 Trojan.Gletta.A File infector 06/09/04 Trojan.Mitglieder.L File infector 06/07/04 Trojan.Priv File infector 05/27/04 Trojan.StartPage.C File infector 05/27/04 Trojan.StartPage.E File infector 06/07/04 VBS.Gwon@mm File infector 05/31/04 VBS.Krim.G@mm File infector 05/28/04 VBS.Leomo File infector 05/31/04 VBS.Picris@mm File infector 05/31/04 VBS.Pub File infector 06/05/04 VBS.Yeno@mm File infector 06/01/04 W32.Ahker@mm File infector 06/01/04 W32.Antinny.Q File infector 05/31/04 W32.Bertle File infector 06/05/04 W32.Bonorm@mm File infector 06/05/04 W32.Dabber.B File infector 06/05/04 W32.Donk.R File infector 06/03/04 W32.Dref.B File infector 05/31/04 W32.Edlack File infector 05/31/04 W32.Erkez.B@mm File infector 06/11/04 W32.Explet.A@mm File infector 06/03/04 W32.Faffer File infector 05/31/04 W32.Gaobot.AOL File infector 06/04/04 W32.Gaobot.AQS File infector 06/07/04 W32.Gaobot.DX File infector 05/27/04 W32.Gaobot.FO File infector 05/27/04 W32.Gaobot.GL File infector 05/27/04 W32.Gaobot.GW File infector 05/27/04 W32.Gaobot.MF File infector 05/27/04 W32.Gaobot.OO File infector 05/27/04 W32.Gaobot.RB File infector 05/27/04 W32.Heshroom@mm File infector 06/05/04 W32.Joot.A@mm File infector 06/04/04 W32.Kemed File infector 06/04/04 W32.Kobot.A File infector 06/01/04 W32.Korgo.D File infector 05/31/04 W32.Korgo.E File infector 06/01/04 W32.Korgo.F File infector 06/01/04 W32.Korgo.G File infector 06/03/04 W32.Korgo.H File infector 06/07/04 W32.Korgo.I File infector 06/08/04 W32.Linyos File infector 06/05/04 W32.Lirva.gen File infector 06/01/04 W32.Mafeg.C File infector 06/08/04 W32.Marak File infector 06/04/04 W32.Mebin File infector 05/31/04 W32.Netsup@mm File infector 05/31/04 W32.Onver File infector 06/05/04 W32.Operot File infector 06/05/04 W32.Paps.A@mm File infector 06/13/04 W32.Primat File infector 06/05/04 W32.Rainwash File infector 06/07/04 W32.Randex.AI File infector 05/27/04 W32.Randex.AMA File infector 05/27/04 W32.Randex.RH File infector 05/27/04 W32.Sasser.G File infector 06/11/04 W32.Shoes@mm File infector 06/02/04 W32.Shufa@mm File infector 06/05/04 W32.Silva@mm File infector 06/01/04 W32.Sober.H@mm File infector 06/11/04 W32.Stagol File infector 06/04/04 W32.Svoy.A@mm File infector 06/05/04 W32.Teta File infector 06/04/04 W32.Tubty.A@mm File infector 06/08/04 W32.Wanex File infector 06/04/04 W64.Rugrat.3344 File infector 05/27/04 W97M.Fatt.int File infector 06/07/04 Worm.Automat.AHO File infector 06/01/04 Worm.Automat.AHP File infector 06/09/04 X97M.Crex File infector 06/09/04 New virus definitions (sorted by Date added): Virus Name Infection Type Date added ---------- -------------- ---------- Backdoor.Remnet File infector 06/13/04 W32.Paps.A@mm File infector 06/13/04 Spyware.SilentSpy File infector 06/11/04 W32.Erkez.B@mm File infector 06/11/04 W32.Sasser.G File infector 06/11/04 W32.Sober.H@mm File infector 06/11/04 Bloodhound.Exploit.10 File infector 06/10/04 Linux.Debilove File infector 06/10/04 Backdoor.Berbew.E File infector 06/09/04 Spyware.NTLogonCapture File infector 06/09/04 Trojan.Gletta.A File infector 06/09/04 Worm.Automat.AHP File infector 06/09/04 X97M.Crex File infector 06/09/04 PWSteal.Etavirp.A File infector 06/08/04 Trojan.Dingsta.A File infector 06/08/04 W32.Korgo.I File infector 06/08/04 W32.Mafeg.C File infector 06/08/04 W32.Tubty.A@mm File infector 06/08/04 Adware.BrowserAid File infector 06/07/04 Adware.Huntbar File infector 06/07/04 Adware.SurfAssistant File infector 06/07/04 Adware.Surfairy File infector 06/07/04 Backdoor.Ducy File infector 06/07/04 Dialer.Wingoon File infector 06/07/04 Hacktool.Exe2Bmp File infector 06/07/04 O97M.Dieingseas.A File infector 06/07/04 Trojan.Mitglieder.L File infector 06/07/04 Trojan.StartPage.E File infector 06/07/04 W32.Gaobot.AQS File infector 06/07/04 W32.Korgo.H File infector 06/07/04 W32.Rainwash File infector 06/07/04 W97M.Fatt.int File infector 06/07/04 Dialer.Goin File infector 06/05/04 VBS.Pub File infector 06/05/04 W32.Bertle File infector 06/05/04 W32.Bonorm@mm File infector 06/05/04 W32.Dabber.B File infector 06/05/04 W32.Heshroom@mm File infector 06/05/04 W32.Linyos File infector 06/05/04 W32.Onver File infector 06/05/04 W32.Operot File infector 06/05/04 W32.Primat File infector 06/05/04 W32.Shufa@mm File infector 06/05/04 W32.Svoy.A@mm File infector 06/05/04 Adware.AdDestroyer File infector 06/04/04 Adware.SearchNew File infector 06/04/04 W32.Gaobot.AOL File infector 06/04/04 W32.Joot.A@mm File infector 06/04/04 W32.Kemed File infector 06/04/04 W32.Marak File infector 06/04/04 W32.Stagol File infector 06/04/04 W32.Teta File infector 06/04/04 W32.Wanex File infector 06/04/04 Backdoor.IRC.Aladinz.R File infector 06/03/04 Backdoor.Nibu.G File infector 06/03/04 W32.Donk.R File infector 06/03/04 W32.Explet.A@mm File infector 06/03/04 W32.Korgo.G File infector 06/03/04 W32.Shoes@mm File infector 06/02/04 Adware.WinFetch File infector 06/01/04 Dialer.DialPlatform File infector 06/01/04 VBS.Yeno@mm File infector 06/01/04 W32.Ahker@mm File infector 06/01/04 W32.Kobot.A File infector 06/01/04 W32.Korgo.E File infector 06/01/04 W32.Korgo.F File infector 06/01/04 W32.Lirva.gen File infector 06/01/04 W32.Silva@mm File infector 06/01/04 Worm.Automat.AHO File infector 06/01/04 Dialer.Intexus File infector 05/31/04 Dialer.Mejorbus File infector 05/31/04 Dialer.QuestNet File infector 05/31/04 Remacc.Lanstar File infector 05/31/04 VBS.Gwon@mm File infector 05/31/04 VBS.Leomo File infector 05/31/04 VBS.Picris@mm File infector 05/31/04 W32.Antinny.Q File infector 05/31/04 W32.Dref.B File infector 05/31/04 W32.Edlack File infector 05/31/04 W32.Faffer File infector 05/31/04 W32.Korgo.D File infector 05/31/04 W32.Mebin File infector 05/31/04 W32.Netsup@mm File infector 05/31/04 BAT.Sebak File infector 05/28/04 VBS.Krim.G@mm File infector 05/28/04 Backdoor.Mtron File infector 05/27/04 Trojan.Priv File infector 05/27/04 Trojan.StartPage.C File infector 05/27/04 W32.Gaobot.DX File infector 05/27/04 W32.Gaobot.FO File infector 05/27/04 W32.Gaobot.GL File infector 05/27/04 W32.Gaobot.GW File infector 05/27/04 W32.Gaobot.MF File infector 05/27/04 W32.Gaobot.OO File infector 05/27/04 W32.Gaobot.RB File infector 05/27/04 W32.Randex.AI File infector 05/27/04 W32.Randex.AMA File infector 05/27/04 W32.Randex.RH File infector 05/27/04 W64.Rugrat.3344 File infector 05/27/04 Adware.WinFavorites.B File infector 05/25/04 Name Changes (sorted by Old Virus Name): Old Virus Name New Virus Name Date changed -------------- -------------- ------------ Backdoor.Padodor to Backdoor.Berbew.D 04/21/04 Backdoor.Sdbot.U to Backdoor.Sdbot.Y 04/23/04 Backdoor.Skobie.A to Spyware.FamilyKeylog 05/02/04 O97M.Tristate.Variant to O97M.Tristate.B 06/04/04 PWSteal.Skobie to Spyware.SpyAgent 05/12/04 PWSteal.Skobie.B to Backdoor.Haxdoor.B 05/20/04 PWSteal.Skobie.C to W32.Gaobot.ALV 05/25/04 Trojan.Simcss.B to Adware.Slagent 04/26/04 W32.Bobax.A to W32.Bobax.B 05/19/04 W32.Dumaru.AJ@mm to Backdoor.Nibu.F 05/18/04 W32.HLLW.Antinny.L to Trojan.Upbit 05/23/04 W32.HLLW.Gearbug@mm to W32.Bugbros.B@mm 04/26/04 W32.Mintop@mm to W32.Bigfairy.C@mm 04/19/04 W32.Netsup@mm to W32.Netsup.A@mm 05/31/04 W32.Randex.XU to Trojan.Niska 04/18/04 W32.Sober.H@mm to Trojan.Ascetic.A 06/12/04 W97.Saver.H to W97M.Saver.H 05/07/04 Name Changes (sorted by Date changed): Old Virus Name New Virus Name Date changed -------------- -------------- ------------ W32.Sober.H@mm to Trojan.Ascetic.A 06/12/04 O97M.Tristate.Variant to O97M.Tristate.B 06/04/04 W32.Netsup@mm to W32.Netsup.A@mm 05/31/04 PWSteal.Skobie.C to W32.Gaobot.ALV 05/25/04 W32.HLLW.Antinny.L to Trojan.Upbit 05/23/04 PWSteal.Skobie.B to Backdoor.Haxdoor.B 05/20/04 W32.Bobax.A to W32.Bobax.B 05/19/04 W32.Dumaru.AJ@mm to Backdoor.Nibu.F 05/18/04 PWSteal.Skobie to Spyware.SpyAgent 05/12/04 W97.Saver.H to W97M.Saver.H 05/07/04 Backdoor.Skobie.A to Spyware.FamilyKeylog 05/02/04 Trojan.Simcss.B to Adware.Slagent 04/26/04 W32.HLLW.Gearbug@mm to W32.Bugbros.B@mm 04/26/04 Backdoor.Sdbot.U to Backdoor.Sdbot.Y 04/23/04 Backdoor.Padodor to Backdoor.Berbew.D 04/21/04 W32.Mintop@mm to W32.Bigfairy.C@mm 04/19/04 W32.Randex.XU to Trojan.Niska 04/18/04 Deletions (sorted by Virus Name): Virus Name Infection Type Date removed ---------- -------------- ------------ A2K.Damcor File infector 05/19/04 Backdoor.Anyserv.B File infector 04/21/04 Dialer.Goin File infector 06/05/04 W32.Gaobot!inf File infector 05/03/04 W32.Sasser.G File infector 06/13/04 Worm.Automat.AHL File infector 04/19/04 Worm.Automat.AHM File infector 05/19/04 Worm.Automat.AHN File infector 05/19/04 Deletions (sorted by Date removed): Virus Name Infection Type Date removed ---------- -------------- ------------ W32.Sasser.G File infector 06/13/04 Dialer.Goin File infector 06/05/04 A2K.Damcor File infector 05/19/04 Worm.Automat.AHM File infector 05/19/04 Worm.Automat.AHN File infector 05/19/04 W32.Gaobot!inf File infector 05/03/04 Backdoor.Anyserv.B File infector 04/21/04 Worm.Automat.AHL File infector 04/19/04 ********************************************************************** ** Additional Information ** ********************************************************************** Additional information regarding this virus definitions update can be found in UPDATE.TXT and TECHNOTE.TXT.