home *** CD-ROM | disk | FTP | other *** search
- **********************************************************************
- ** **
- ** What's New in the NAV Virus Definitions Files WHATSNEW.TXT **
- ** **
- ** Symantec Security Response September 06, 2002 **
- ** **
- **********************************************************************
-
- This document contains the following topics:
-
- * Virus Alerts
- * New Technologies
- * Changes Incorporated Into This Update
- * Additional Information
-
-
- **********************************************************************
- ** Virus Alerts **
- **********************************************************************
-
- The ten most commonly reported viruses, worldwide:
-
- 1 W32.Klez.H@mm
- 2 W32.Nimda.A@mm
- 3 W32.Klez.E@mm
- 4 W32.Nimda.E@mm
- 5 W95.Hybris.worm
- 6 Trojan Horse
- 7 W32.Magistr.39921@mm
- 8 Backdoor.Trojan
- 9 JS.Seeker
- 10 W32.Badtrans.B@mm
-
-
- **********************************************************************
- ** New Technologies **
- **********************************************************************
-
- DATE Technologies Added
- ---- ------------------
- 02/18/99 * Detection and repair of macro viruses in Word and Excel
- 2000 documents.
-
- 05/15/99 * Added repair for PowerPoint viruses.
- * Improved heuristics to detect more WORD 97 related
- viruses.
-
- 06/10/99 * Menu repair technology for WORD macro viruses that change
- command bar customizations in NORMAL.DOT.
-
- 07/12/99 * Added support for scanning of Ichitaro 8/9 documents.
- (Ichitaro is a Japanese word processing program).
-
- 08/19/99 * Added detection and repair for embedded documents inside
- PowerPoint 97.
-
- 11/22/99 * Added detection and repair for Trojans embedded in OLE
- files, such as Windows scrap files and MS Office
- documents.
- * Added detection for viruses which infect Microsoft
- Project documents (P98M.Corner.A, for example).
-
- 02/10/00 * Added support for scanning of UNIX executables.
- * Added detection for infected Visio documents.
-
- 12/18/00 * Added heuristics for for 32-bit Windows viruses.
- * Added a script scanner which increases our capabilities for
- detecting script based threats.
-
- 08/02/01 * Engine Update 08/02/01
- * All products that use the NAVEX 1.5 architecture
- (in other words, most major Symantec products released over
- the last 3 - 4 years) will receive the new functionality.
- * This enhanced technology provides improved script scanning
- as well as more proactive detection of unknown script-based
- threats.
-
-
- **********************************************************************
- ** Changes Incorporated Into This Virus Definitions Update **
- **********************************************************************
-
- DATE
- ----
-
- New virus definitions (sorted by Virus Name):
-
- Virus Name Infection Type Date added
- ---------- -------------- ---------
- Backdoor.AntiLam.20 File infector 08/30/02
- Backdoor.Cuhmap File infector 09/06/02
- Backdoor.Cyn File infector 08/30/02
- Backdoor.Lastdoor File infector 09/06/02
- Backdoor.Latinus.B File infector 09/04/02
- Backdoor.Litmus.203 File infector 09/04/02
- Backdoor.Mite File infector 09/04/02
- Backdoor.Msic File infector 09/04/02
- Backdoor.OptixPro.10 File infector 09/04/02
- Backdoor.OptixPro.12 File infector 08/30/02
- Backdoor.Ptakks.B File infector 09/03/02
- Backdoor.Renomb File infector 09/03/02
- Backdoor.Seamy File infector 09/03/02
- Backdoor.Ugy File infector 09/06/02
- Backdoor.Wasil File infector 09/06/02
- Bin.Auto.BYY File infector 09/03/02
- Bin.Auto.BYZ File infector 09/03/02
- Bin.Auto.BZA File infector 09/03/02
- Bin.Auto.BZB File infector 09/03/02
- Bin.Auto.BZC File infector 09/03/02
- Bin.Auto.BZD File infector 09/03/02
- Bin.Auto.BZE File infector 09/03/02
- Bin.Auto.BZF File infector 09/03/02
- Bin.Auto.BZG File infector 09/03/02
- Bin.Auto.BZH File infector 09/03/02
- Bin.Auto.BZI File infector 09/03/02
- Bin.Auto.BZJ File infector 09/03/02
- Bin.Auto.BZK File infector 09/03/02
- Bin.Auto.BZL File infector 09/03/02
- Bin.Auto.BZM File infector 09/03/02
- Bin.Auto.BZN File infector 09/03/02
- Bin.Auto.BZO File infector 09/03/02
- Bin.Auto.BZP File infector 09/03/02
- Bin.Auto.BZQ File infector 09/03/02
- Bin.Auto.BZR File infector 09/03/02
- Bin.Auto.BZS File infector 09/03/02
- Bin.Auto.BZT File infector 09/03/02
- Bin.Auto.BZU File infector 09/03/02
- Bin.Auto.BZV File infector 09/03/02
- Bin.Auto.BZW File infector 09/03/02
- Bin.Auto.BZX File infector 09/03/02
- Bin.Auto.BZY File infector 09/03/02
- Bin.Auto.BZZ File infector 09/03/02
- Bin.Auto.CAA File infector 09/03/02
- Bin.Auto.CAB File infector 09/03/02
- Bin.Auto.CAC File infector 09/03/02
- Bin.Auto.CAD File infector 09/03/02
- Bin.Auto.CAE File infector 09/03/02
- Bin.Auto.CAF File infector 09/03/02
- Bin.Auto.CAG File infector 09/03/02
- Bin.Auto.CAH File infector 09/03/02
- Bin.Auto.CAI File infector 09/03/02
- Bin.Auto.CAJ File infector 09/03/02
- Bin.Auto.CAK File infector 09/03/02
- Bin.Auto.CAL File infector 09/03/02
- Bin.Auto.CAM File infector 09/03/02
- Bin.Auto.CAN File infector 09/04/02
- Bin.Auto.CAO File infector 09/04/02
- Bloodhound.W32.5 File infector 09/06/02
- Frog.1655 File infector 09/06/02
- Frog.1767 File infector 09/06/02
- Frog.1767.B File infector 09/06/02
- Frog.1767.C File infector 09/06/02
- Frog.1815 File infector 09/06/02
- Frog.1927 File infector 09/06/02
- Frog.2199 File infector 09/06/02
- Frog.2359 File infector 09/06/02
- Frog.2423 File infector 09/06/02
- Gutter.1855 File infector 09/04/02
- HLLP.Bishop.20251 File infector 08/30/02
- HLLP.Cyb.8197 File infector 08/30/02
- HLLP.Cyb.8197(2) File infector 08/30/02
- HLLP.Jackie.6304 File infector 08/30/02
- PWSteal.SoapSpy File infector 09/03/02
- RedArc.1421 File infector 08/30/02
- Trojan.Breonic File infector 08/30/02
- Trojan.Deleall File infector 09/03/02
- Trojan.DiabKey File infector 09/03/02
- Trojan.Halloweak File infector 09/03/02
- Trojan.KillAV (5) File infector 09/04/02
- Trojan.MagicCall File infector 09/03/02
- Trojan.Rebohon File infector 09/03/02
- VBS.Ednav@mm File infector 09/04/02
- VBS.Emailtips@mm File infector 09/03/02
- VBS.Melhack@mm File infector 08/30/02
- W32.Gink.Worm File infector 09/03/02
- W32.Gismor@mm File infector 09/06/02
- W32.HLLP.Oldex File infector 09/03/02
- W32.HLLW.Walrain File infector 09/03/02
- W32.Housax.Irc File infector 09/06/02
- W32.Hunch.H@mm File infector 09/06/02
- W32.Hunch.I@mm File infector 09/06/02
- W32.Muzk.Irc File infector 09/04/02
- W32.Nohoper.7397 File infector 09/03/02
- W32.Resdoc File infector 09/06/02
- W32.Stayrina.Worm File infector 09/04/02
- W32.Temir.Worm File infector 09/04/02
- W32.Velost File infector 09/04/02
- Worm.Automat.AGT File infector 09/06/02
- X97M.Manalo.M File infector 09/03/02
-
- New virus definitions (sorted by Date added):
-
- Virus Name Infection Type Date added
- ---------- -------------- ----------
- Backdoor.Cuhmap File infector 09/06/02
- Backdoor.Lastdoor File infector 09/06/02
- Backdoor.Ugy File infector 09/06/02
- Backdoor.Wasil File infector 09/06/02
- Bloodhound.W32.5 File infector 09/06/02
- Frog.1655 File infector 09/06/02
- Frog.1767 File infector 09/06/02
- Frog.1767.B File infector 09/06/02
- Frog.1767.C File infector 09/06/02
- Frog.1815 File infector 09/06/02
- Frog.1927 File infector 09/06/02
- Frog.2199 File infector 09/06/02
- Frog.2359 File infector 09/06/02
- Frog.2423 File infector 09/06/02
- W32.Gismor@mm File infector 09/06/02
- W32.Housax.Irc File infector 09/06/02
- W32.Hunch.H@mm File infector 09/06/02
- W32.Hunch.I@mm File infector 09/06/02
- W32.Resdoc File infector 09/06/02
- Worm.Automat.AGT File infector 09/06/02
- Backdoor.Latinus.B File infector 09/04/02
- Backdoor.Litmus.203 File infector 09/04/02
- Backdoor.Mite File infector 09/04/02
- Backdoor.Msic File infector 09/04/02
- Backdoor.OptixPro.10 File infector 09/04/02
- Bin.Auto.CAN File infector 09/04/02
- Bin.Auto.CAO File infector 09/04/02
- Gutter.1855 File infector 09/04/02
- Trojan.KillAV (5) File infector 09/04/02
- VBS.Ednav@mm File infector 09/04/02
- W32.Muzk.Irc File infector 09/04/02
- W32.Stayrina.Worm File infector 09/04/02
- W32.Temir.Worm File infector 09/04/02
- W32.Velost File infector 09/04/02
- Backdoor.Ptakks.B File infector 09/03/02
- Backdoor.Renomb File infector 09/03/02
- Backdoor.Seamy File infector 09/03/02
- Bin.Auto.BYY File infector 09/03/02
- Bin.Auto.BYZ File infector 09/03/02
- Bin.Auto.BZA File infector 09/03/02
- Bin.Auto.BZB File infector 09/03/02
- Bin.Auto.BZC File infector 09/03/02
- Bin.Auto.BZD File infector 09/03/02
- Bin.Auto.BZE File infector 09/03/02
- Bin.Auto.BZF File infector 09/03/02
- Bin.Auto.BZG File infector 09/03/02
- Bin.Auto.BZH File infector 09/03/02
- Bin.Auto.BZI File infector 09/03/02
- Bin.Auto.BZJ File infector 09/03/02
- Bin.Auto.BZK File infector 09/03/02
- Bin.Auto.BZL File infector 09/03/02
- Bin.Auto.BZM File infector 09/03/02
- Bin.Auto.BZN File infector 09/03/02
- Bin.Auto.BZO File infector 09/03/02
- Bin.Auto.BZP File infector 09/03/02
- Bin.Auto.BZQ File infector 09/03/02
- Bin.Auto.BZR File infector 09/03/02
- Bin.Auto.BZS File infector 09/03/02
- Bin.Auto.BZT File infector 09/03/02
- Bin.Auto.BZU File infector 09/03/02
- Bin.Auto.BZV File infector 09/03/02
- Bin.Auto.BZW File infector 09/03/02
- Bin.Auto.BZX File infector 09/03/02
- Bin.Auto.BZY File infector 09/03/02
- Bin.Auto.BZZ File infector 09/03/02
- Bin.Auto.CAA File infector 09/03/02
- Bin.Auto.CAB File infector 09/03/02
- Bin.Auto.CAC File infector 09/03/02
- Bin.Auto.CAD File infector 09/03/02
- Bin.Auto.CAE File infector 09/03/02
- Bin.Auto.CAF File infector 09/03/02
- Bin.Auto.CAG File infector 09/03/02
- Bin.Auto.CAH File infector 09/03/02
- Bin.Auto.CAI File infector 09/03/02
- Bin.Auto.CAJ File infector 09/03/02
- Bin.Auto.CAK File infector 09/03/02
- Bin.Auto.CAL File infector 09/03/02
- Bin.Auto.CAM File infector 09/03/02
- PWSteal.SoapSpy File infector 09/03/02
- Trojan.Deleall File infector 09/03/02
- Trojan.DiabKey File infector 09/03/02
- Trojan.Halloweak File infector 09/03/02
- Trojan.MagicCall File infector 09/03/02
- Trojan.Rebohon File infector 09/03/02
- VBS.Emailtips@mm File infector 09/03/02
- W32.Gink.Worm File infector 09/03/02
- W32.HLLP.Oldex File infector 09/03/02
- W32.HLLW.Walrain File infector 09/03/02
- W32.Nohoper.7397 File infector 09/03/02
- X97M.Manalo.M File infector 09/03/02
- Backdoor.AntiLam.20 File infector 08/30/02
- Backdoor.Cyn File infector 08/30/02
- Backdoor.OptixPro.12 File infector 08/30/02
- HLLP.Bishop.20251 File infector 08/30/02
- HLLP.Cyb.8197 File infector 08/30/02
- HLLP.Cyb.8197(2) File infector 08/30/02
- HLLP.Jackie.6304 File infector 08/30/02
- RedArc.1421 File infector 08/30/02
- Trojan.Breonic File infector 08/30/02
- VBS.Melhack@mm File infector 08/30/02
-
- Name Changes (sorted by Old Virus Name):
-
- Old Virus Name New Virus Name Date changed
- -------------- -------------- ------------
- BAT.IKol to BAT.Ikol 08/29/02
- Backdoor.CrazyNet to Backdoor.Crazynet 07/12/02
- Backdoor.Fragglerock to Backdoor.Fraggle 07/16/02
- Backdoor.Gspot to Backdoor.Spigot 06/18/02
- Backdoor.MoSuck to Backdoor.Mosuck 08/14/02
- Backdoor.MoSuck.dr to Backdoor.Mosuck.dr 08/15/02
- Backdoor.NDad to Backdoor.Ndad 08/14/02
- Backdoor.TheefLE to Backdoor.Theef 07/12/02
- Bat.Natay to Bat.Natay@mm 08/13/02
- Bloodhound.W32.NN1 to Bloodhound.W32.2 07/09/02
- Bloodhound.W32.NN2 to Bloodhound.W32.3 07/09/02
- Bloodhound.W32.WH1 to Bloodhound.W32.1 07/09/02
- Boot.Wyx.c to Wyx.C (b) 08/12/02
- IRC.kierz to IRC.Kierz 08/05/02
- MSN.Trojan to Bneo.Trojan 08/26/02
- Perl.Abuser to Unix.Abuser 09/04/02
- Perl.Klizan to Unix.Klizan 09/04/02
- Perl.Molus to Unix.Molus 09/04/02
- Supervisor.1256 to Zak.1256 06/20/02
- Supervisor.2906 to Zak.2906 06/20/02
- Trojan.MagicCall to W32.MagicCall 09/06/02
- Trojan.SharesEnable to Trojan.Sharnable 08/12/02
- VBS.IKol to BAT.IKol 08/28/02
- VBS.Natay@mm to VBS.Natay 08/13/02
- VBS.Patch@mm to VBS.Slip.C@mm 07/09/02
- VBS.Phram.D to VBS.Phram.D.Int 08/21/02
- VBS.ZVM@mm to VBS.Bajar.B@mm 07/03/02
- W32.Alien.Worm to W32.Winfig.Gen 07/23/02
- W32.Benf@mm to Trojan.Benfgame 08/26/02
- W32.Duni.Worm to W32.Kitro.C.Worm 07/08/02
- W32.Fakeweed.Worm to W32.Alcaul.Worm 07/08/02
- W32.Fcoder to W32.HLLC.Fcoder 08/22/02
- W32.Gubed@mm to W32.Gubed.int 06/27/02
- W32.HLLW.Dejas to W32.Hunch.E@mm 08/22/02
- W32.HLLW.Quin to W32.Quin.Irc 09/03/02
- W32.HLLW.Spear to W32.HLLW.Yoohoo.C 08/27/02
- W32.Kiltro.Worm to W32.Kitro.A.Worm 07/08/02
- W32.Kitro.D.int to W32.Kitro.D.Worm 07/09/02
- W32.Kitty.Worm to W32.Supova.Worm 07/12/02
- W32.Liac@mm to W32.Liac.A@mm 07/09/02
- W32.Mortag.Worm to W32.Mortag 08/14/02
- W32.Nios.14292 to W32.Golsys.14292 08/15/02
- W32.Niqim to W32.HLLW.Lama.C 08/27/02
- W32.Stayrina.Worm to W32.Stayrina 09/06/02
- W32.Ultimax.Worm to W32.HLLW.Ultimax 07/18/02
- W32.Vig.Worm to W32.HLLW.Vig 08/22/02
- W32.Warcraft to W32.Evala.Worm 07/12/02
- W32.ZVM@mm to W32.Bajar.B@mm 07/03/02
- WM.Laroux.UB to XM.Laroux.UB 06/25/02
- WNT.YdalBug.Worm to W32.Dalbug.Worm 07/09/02
-
- Name Changes (sorted by Date changed):
-
- Old Virus Name New Virus Name Date changed
- -------------- -------------- ------------
- Trojan.MagicCall to W32.MagicCall 09/06/02
- W32.Stayrina.Worm to W32.Stayrina 09/06/02
- Perl.Abuser to Unix.Abuser 09/04/02
- Perl.Klizan to Unix.Klizan 09/04/02
- Perl.Molus to Unix.Molus 09/04/02
- W32.HLLW.Quin to W32.Quin.Irc 09/03/02
- BAT.IKol to BAT.Ikol 08/29/02
- VBS.IKol to BAT.IKol 08/28/02
- W32.HLLW.Spear to W32.HLLW.Yoohoo.C 08/27/02
- W32.Niqim to W32.HLLW.Lama.C 08/27/02
- MSN.Trojan to Bneo.Trojan 08/26/02
- W32.Benf@mm to Trojan.Benfgame 08/26/02
- W32.Fcoder to W32.HLLC.Fcoder 08/22/02
- W32.HLLW.Dejas to W32.Hunch.E@mm 08/22/02
- W32.Vig.Worm to W32.HLLW.Vig 08/22/02
- VBS.Phram.D to VBS.Phram.D.Int 08/21/02
- Backdoor.MoSuck.dr to Backdoor.Mosuck.dr 08/15/02
- W32.Nios.14292 to W32.Golsys.14292 08/15/02
- Backdoor.MoSuck to Backdoor.Mosuck 08/14/02
- Backdoor.NDad to Backdoor.Ndad 08/14/02
- W32.Mortag.Worm to W32.Mortag 08/14/02
- Bat.Natay to Bat.Natay@mm 08/13/02
- VBS.Natay@mm to VBS.Natay 08/13/02
- Boot.Wyx.c to Wyx.C (b) 08/12/02
- Trojan.SharesEnable to Trojan.Sharnable 08/12/02
- IRC.kierz to IRC.Kierz 08/05/02
- W32.Alien.Worm to W32.Winfig.Gen 07/23/02
- W32.Ultimax.Worm to W32.HLLW.Ultimax 07/18/02
- Backdoor.Fragglerock to Backdoor.Fraggle 07/16/02
- Backdoor.CrazyNet to Backdoor.Crazynet 07/12/02
- Backdoor.TheefLE to Backdoor.Theef 07/12/02
- W32.Kitty.Worm to W32.Supova.Worm 07/12/02
- W32.Warcraft to W32.Evala.Worm 07/12/02
- Bloodhound.W32.NN1 to Bloodhound.W32.2 07/09/02
- Bloodhound.W32.NN2 to Bloodhound.W32.3 07/09/02
- Bloodhound.W32.WH1 to Bloodhound.W32.1 07/09/02
- VBS.Patch@mm to VBS.Slip.C@mm 07/09/02
- W32.Kitro.D.int to W32.Kitro.D.Worm 07/09/02
- W32.Liac@mm to W32.Liac.A@mm 07/09/02
- WNT.YdalBug.Worm to W32.Dalbug.Worm 07/09/02
- W32.Duni.Worm to W32.Kitro.C.Worm 07/08/02
- W32.Fakeweed.Worm to W32.Alcaul.Worm 07/08/02
- W32.Kiltro.Worm to W32.Kitro.A.Worm 07/08/02
- VBS.ZVM@mm to VBS.Bajar.B@mm 07/03/02
- W32.ZVM@mm to W32.Bajar.B@mm 07/03/02
- W32.Gubed@mm to W32.Gubed.int 06/27/02
- WM.Laroux.UB to XM.Laroux.UB 06/25/02
- Supervisor.1256 to Zak.1256 06/20/02
- Supervisor.2906 to Zak.2906 06/20/02
- Backdoor.Gspot to Backdoor.Spigot 06/18/02
-
- Deletions (sorted by Virus Name):
-
- Virus Name Infection Type Date removed
- ---------- -------------- ------------
- Acurev.272 File infector 06/10/02
- Acurev.536 File infector 06/10/02
- Adios.601 File infector 06/10/02
- Adit.1210 File infector 06/10/02
- Akuku.886 File infector 06/10/02
- Akuku.886.E File infector 06/10/02
- AntiPascal.400.D File infector 06/10/02
- Antilamer.Trojan File infector 06/10/02
- Apulia.17584 File infector 06/10/02
- Bin.Auto.BZV File infector 09/06/02
- Bloodhound.W32.NN1 File infector 06/11/02
- Bloodhound.W32.NN2 File infector 06/11/02
- Gutter.1855 File infector 09/06/02
- Joke.JS.Alert File infector 06/11/02
- Pedophilia Trojan File infector 07/08/02
- W32.Prato File infector 08/22/02
- W32.Winfig.Gen File infector 07/23/02
- Ydaerla File infector 06/11/02
-
- Deletions (sorted by Date removed):
-
- Virus Name Infection Type Date removed
- ---------- -------------- ------------
- Bin.Auto.BZV File infector 09/06/02
- Gutter.1855 File infector 09/06/02
- W32.Prato File infector 08/22/02
- W32.Winfig.Gen File infector 07/23/02
- Pedophilia Trojan File infector 07/08/02
- Bloodhound.W32.NN1 File infector 06/11/02
- Bloodhound.W32.NN2 File infector 06/11/02
- Joke.JS.Alert File infector 06/11/02
- Ydaerla File infector 06/11/02
- Acurev.272 File infector 06/10/02
- Acurev.536 File infector 06/10/02
- Adios.601 File infector 06/10/02
- Adit.1210 File infector 06/10/02
- Akuku.886 File infector 06/10/02
- Akuku.886.E File infector 06/10/02
- AntiPascal.400.D File infector 06/10/02
- Antilamer.Trojan File infector 06/10/02
- Apulia.17584 File infector 06/10/02
-
-
- **********************************************************************
- ** Additional Information **
- **********************************************************************
- Additional information regarding this virus definitions update can be
- found in UPDATE.TXT and TECHNOTE.TXT.
-
-