home *** CD-ROM | disk | FTP | other *** search
/ PC World 2001 November / PCWorld_2001-11_cd.bin / Software / Antiviry / nav16 / 1003i16.exe / whatsnew.txt < prev   
Text File  |  2001-10-03  |  44KB  |  765 lines
  1. **********************************************************************
  2. **                                                                  **
  3. **  What's New in the NAV Virus Definitions Files      WHATSNEW.TXT **
  4. **                                                                  **
  5. **  Symantec AntiVirus Research Center (SARC)    October   03, 2001 **
  6. **                                                                  **
  7. **********************************************************************
  8. This document contains the following topics:
  9.  
  10.  * Virus Alerts
  11.  * New Technologies
  12.  * Changes Incorporated Into This Update
  13.  * Enabling Scanning Features
  14.  * Additional Information
  15.  
  16. **********************************************************************
  17. ** Virus Alerts                                                     **
  18. **********************************************************************
  19. The ten most commonly reported viruses, worldwide:
  20.  
  21.     1  W95.Hybris.worm
  22.     2  W95.MTX
  23.     3  Wscript.KakWorm
  24.     4  W32.HLLW.Bymer
  25.     5  W32.Magistr.24876@mm
  26.     6  W32.Badtrans.13312@mm
  27.     7  W32.Navidad.16896
  28.     8  Happy99.Worm
  29.     9  VBS.LoveLetter
  30.    10  W32.HLLW.Qaz
  31.  
  32. **********************************************************************
  33. ** New Technologies                                                 **
  34. **********************************************************************
  35.  
  36. DATE         Technologies Added
  37. ----         ------------------
  38. 02/18/99   * Detection and repair of macro viruses in Word and Excel
  39.              2000 documents.
  40.  
  41. 05/15/99   * Added repair for PowerPoint viruses.
  42.            * Improved heuristics to detect more WORD 97 related
  43.              viruses.
  44.  
  45. 06/10/99   * Menu repair technology for WORD macro viruses that change
  46.              command bar customizations in NORMAL.DOT.
  47.  
  48. 07/12/99   * Added support for scanning of Ichitaro 8/9 documents.
  49.              (Ichitaro is a Japanese word processing program).
  50.  
  51. 08/19/99   * Added detection and repair for embedded documents inside
  52.              PowerPoint 97.
  53.  
  54. 11/22/99   * Added detection and repair for Trojans embedded in OLE
  55.              files, such as Windows scrap files and MS Office
  56.              documents.
  57.            * Added detection for viruses which infect Microsoft
  58.              Project documents (P98M.Corner.A, for example).
  59.  
  60. 02/10/00   * Added support for scanning of UNIX executables.
  61.            * Added detection for infected Visio documents.
  62.  
  63. 12/18/00   * Added heuristics for for 32-bit Windows viruses.
  64.            * Added a script scanner which increases our capabilities for 
  65.              detecting script based threats.
  66.  
  67. 08/02/01   * Engine Update 08/02/01
  68.            * All products that use the NAVEX 1.5 architecture 
  69.              (in other words, most major Symantec products released over 
  70.              the last 3 - 4 years) will receive the new functionality.
  71.            * This enhanced technology provides improved script scanning 
  72.              as well as more proactive detection of unknown script-based 
  73.              threats. 
  74.  
  75.              
  76.  
  77. **********************************************************************
  78. ** Changes Incorporated Into This Virus Definitions Update          **
  79. **********************************************************************
  80.  
  81. DATE
  82. ----
  83.  
  84.  
  85. New virus definitions (sorted by Virus Name):
  86.  
  87.         Virus Name                Infection Type          Date added
  88.         ----------                --------------          ----------
  89.         A97M.AMG.Kit              File infector            09/17/01
  90.         ACAD.Pobresito            File infector            10/01/01
  91.         Adif.732                  File infector            09/12/01
  92.         Alad.2293                 File infector            09/05/01
  93.         BAT.Ende                  File infector            09/10/01
  94.         BAT.Execom.cmp            File infector            09/10/01
  95.         BAT.Inkbatch              File infector            09/10/01
  96.         BAT.Mem2                  File infector            09/10/01
  97.         Backdoor.Granst           File infector            09/14/01
  98.         Backdoor.IRC.Critical     File infector            09/18/01
  99.         Backdoor.NetThief         File infector            09/14/01
  100.         Backdoor.Oblivion         File infector            09/28/01
  101.         Backdoor.Scorpina         File infector            09/13/01
  102.         Backdoor.Trojan.dr(5)     File infector            09/05/01
  103.         Backdoor.Trojan.dr(6)     File infector            09/14/01
  104.         Backdoor.Y3KRat.12        File infector            09/06/01
  105.         Bat.Nice.2634             File infector            10/01/01
  106.         Bat.Putes                 File infector            10/01/01
  107.         Bin.Auto.AQT              File infector            09/27/01
  108.         Bloodhound.Import         File infector            09/10/01
  109.         Bloodhound.OrgCopy        File infector            09/10/01
  110.         BugHunter.200             File infector            09/06/01
  111.         BugHunter.206             File infector            09/06/01
  112.         DT.6144                   File infector            10/01/01
  113.         Dilo.667                  File infector            09/17/01
  114.         DonaldD.Trojan.C          File infector            09/12/01
  115.         Eddy.gen (x)              File infector            09/10/01
  116.         Frizer.995                File infector            09/17/01
  117.         HLL.IRC.Merlin            File infector            09/06/01
  118.         Hacktool.Exebind          File infector            09/12/01
  119.         Hacktool.Rootkit          File infector            09/27/01
  120.         HiTechAssasin.453         File infector            09/06/01
  121.         Hllw.17892                File infector            09/05/01
  122.         Hllw.Naston.19000         File infector            09/05/01
  123.         Holon.Trojan              File infector            09/17/01
  124.         IRC.Forca.Worm            File infector            09/05/01
  125.         IRC.Shiver                File infector            09/06/01
  126.         Invert.622                File infector            10/01/01
  127.         JS.Alert.Trojan           File infector            09/18/01
  128.         Kula.Trojan               File infector            09/24/01
  129.         Linux.Abulia              File infector            10/01/01
  130.         LittleBrother.299(2)      File infector            10/03/01
  131.         Macro.src                 File infector            09/12/01
  132.         O97M.Coco.A               File infector            09/05/01
  133.         O97M.Nostyle.D            File infector            10/03/01
  134.         P98M.Eikrad               File infector            09/24/01
  135.         PWS.Cain.dr               File infector            09/13/01
  136.         Shake.Trojan              File infector            09/24/01
  137.         SillyC.200.e              File infector            09/06/01
  138.         Trex.Trojan               File infector            09/24/01
  139.         Trojan.Badmacro           File infector            09/05/01
  140.         Trojan.Bat.Rude           File infector            09/10/01
  141.         Trojan.Hackin             File infector            09/05/01
  142.         Trojan.Hackin             File infector            09/06/01
  143.         Trojan.IRC.Lipserf        File infector            09/12/01
  144.         Trojan.Kingnoon.int       File infector            09/05/01
  145.         Trojan.VBS.Lipserf        File infector            09/12/01
  146.         Trojan.VBS.PingBash       File infector            09/10/01        
  147.         Trojan.W97M.Abre          File infector            09/10/01
  148.         Trojan.ZeroBoot           File infector            09/10/01
  149.         Umisy.2322                File infector            09/10/01
  150.         V5M.Kolera.A              File infector            09/10/01
  151.         VBS.Aleat@mm              File infector            10/01/01
  152.         VBS.Alert.A@mm            File infector            09/24/01
  153.         VBS.Bark                  File infector            09/12/01
  154.         VBS.Blank.Gen             File infector            09/26/01
  155.         VBS.Boluc@mm              File infector            10/01/01
  156.         VBS.Cosa.A@mm             File infector            09/04/01
  157.         VBS.Cuerpo                File infector            09/12/01
  158.         VBS.Funny@mm              File infector            10/01/01
  159.         VBS.Gribble               File infector            09/12/01
  160.         VBS.Hotdog.gen            File infector            09/06/01
  161.         VBS.IE5Grab.A             File infector            10/01/01
  162.         VBS.Lam@mm                File infector            09/24/01
  163.         VBS.Loveletter.CQ         File infector            09/06/01
  164.         VBS.Reality.C             File infector            09/05/01
  165.         VBS.Trappy@mm             File infector            09/06/01
  166.         VBS.VBSWT                 File infector            09/27/01
  167.         VBS.Xendi.Trojan          File infector            09/26/01
  168.         VBSWT.Generator           File infector            09/27/01
  169.         W2K.Ketam                 File infector            09/17/01
  170.         W32.Apost.Worm@mm         File infector            09/04/01
  171.         W32.Assic.worm            File infector            09/14/01
  172.         W32.Beavuh                File infector            09/14/01
  173.         W32.BlueCode.Worm         File infector            09/07/01
  174.         W32.Calm                  File infector            09/14/01
  175.         W32.Creepy@mm             File infector            09/24/01
  176.         W32.Fanta.worm            File infector            09/14/01
  177.         W32.HLLO.A                File infector            10/03/01
  178.         W32.HLLO.Antz.gen         File infector            10/03/01
  179.         W32.HLLP.Imel             File infector            10/03/01
  180.         W32.HLLW.Giwin            File infector            10/03/01
  181.         W32.HLLW.Myset            File infector            10/03/01
  182.         W32.HLLW.Overlo           File infector            10/03/01
  183.         W32.Jimm                  File infector            10/03/01
  184.         W32.Kan                   File infector            09/18/01
  185.         W32.Lesbot                File infector            10/03/01
  186.         W32.Magistr.39921@mm      File infector            09/04/01
  187.         W32.Magistr.trojan        File infector            09/04/01
  188.         W32.Mahter                File infector            10/03/01
  189.         W32.Makegr                File infector            09/14/01
  190.         W32.Nimda.A@mm            File infector            09/18/01
  191.         W32.Nimda.A@mm (dll)      File infector            09/18/01
  192.         W32.Nimda.A@mm (dr)       File infector            09/18/01
  193.         W32.Nimda.A@mm(html)      File infector            09/18/01
  194.         W32.Nimda.enc             File infector            09/18/01
  195.         W32.Nimda.enc(1)          File infector            09/18/01
  196.         W32.Nuk                   File infector            10/03/01
  197.         W32.PAME.B                File infector            09/17/01
  198.         W32.Revaz.gen             File infector            10/03/01
  199.         W32.Row@mm                File infector            09/24/01
  200.         W32.Toush                 File infector            10/03/01
  201.         W32.Twea@mm               File infector            09/27/01
  202.         W32.Unce@mm               File infector            09/28/01
  203.         W32.Vicious.Int           File infector            10/03/01
  204.         W32.Vote.A@mm             File infector            09/24/01
  205.         W32.Vote.B@mm             File infector            09/26/01
  206.         W32.Whiter.Trojan         File infector            09/26/01
  207.         W32.Zush@mm               File infector            09/26/01
  208.         W95.Apop                  File infector            09/06/01
  209.         W95.CIH.corrupt           File infector            09/06/01
  210.         W95.CIH.damaged           File infector            09/14/01
  211.         W95.Fix2001.36864         File infector            09/26/01
  212.         W95.MTXII                 File infector            09/14/01
  213.         W97M.Ami.C                File infector            09/17/01
  214.         W97M.Arm.A                File infector            09/05/01
  215.         W97M.Automat.AGH          File infector            09/05/01
  216.         W97M.Bablas.BW            File infector            09/06/01
  217.         W97M.Been.A               File infector            09/05/01
  218.         W97M.CaptainL             File infector            09/06/01
  219.         W97M.Cooldown             File infector            09/10/01
  220.         W97M.Dihlo                File infector            10/01/01
  221.         W97M.Doccopy.C            File infector            10/01/01
  222.         W97M.Ethan.EK.src         File infector            09/10/01
  223.         W97M.Ethan.EL             File infector            09/12/01
  224.         W97M.Fox.Trojan           File infector            09/17/01
  225.         W97M.Likon.A              File infector            10/03/01
  226.         W97M.Minimal.BY           File infector            09/14/01
  227.         W97M.Mtrue.B              File infector            10/01/01
  228.         W97M.Muna.A               File infector            10/03/01
  229.         W97M.Peat                 File infector            10/03/01
  230.         W97M.Remos.A              File infector            09/24/01
  231.         W97M.Sting                File infector            09/18/01
  232.         W97M.Tador.A              File infector            10/03/01
  233.         W97M.Thus.ES              File infector            09/26/01
  234.         W97M.VMPCK1.gen           File infector            09/04/01
  235.         W97M.Verlor.K.vbs         File infector            09/05/01
  236.         W97M.Volcano.A@mm         File infector            09/20/01
  237.         W97M.Vp                   File infector            10/01/01
  238.         W97M.Zeitung.E            File infector            10/01/01
  239.         WM.Wazzu.GH               File infector            10/01/01
  240.         WNT.Frangible.int         File infector            10/01/01
  241.         WNT.Jater                 File infector            09/26/01
  242.         WNT.Pasti@mm              File infector            10/01/01
  243.         Win.HLLW.Macho            File infector            09/27/01
  244.         X97M.Adn.E                File infector            10/01/01
  245.         X97M.Amuka.A              File infector            10/03/01
  246.         X97M.Amuka.B              File infector            10/03/01
  247.         X97M.Bonker.gen           File infector            09/10/01
  248.         X97M.DBT.gen              File infector            09/10/01
  249.         X97M.Ellar.A              File infector            09/27/01
  250.         XM.Robocop.B              File infector            09/04/01
  251.         YankeeDoodle.2772         File infector            09/12/01
  252.        
  253.                                                  
  254.         
  255. New virus definitions (sorted by Date added):
  256.         
  257.         Virus Name                Infection Type          Date added
  258.         ----------                --------------          ----------
  259.         LittleBrother.299(2)      File infector            10/03/01
  260.         O97M.Nostyle.D            File infector            10/03/01
  261.         W32.HLLO.A                File infector            10/03/01
  262.         W32.HLLO.Antz.gen         File infector            10/03/01
  263.         W32.HLLP.Imel             File infector            10/03/01
  264.         W32.HLLW.Giwin            File infector            10/03/01
  265.         W32.HLLW.Myset            File infector            10/03/01
  266.         W32.HLLW.Overlo           File infector            10/03/01
  267.         W32.Jimm                  File infector            10/03/01
  268.         W32.Lesbot                File infector            10/03/01
  269.         W32.Mahter                File infector            10/03/01
  270.         W32.Nuk                   File infector            10/03/01
  271.         W32.Revaz.gen             File infector            10/03/01
  272.         W32.Toush                 File infector            10/03/01
  273.         W32.Vicious.Int           File infector            10/03/01
  274.         W97M.Likon.A              File infector            10/03/01
  275.         W97M.Muna.A               File infector            10/03/01
  276.         W97M.Peat                 File infector            10/03/01
  277.         W97M.Tador.A              File infector            10/03/01
  278.         X97M.Amuka.A              File infector            10/03/01
  279.         X97M.Amuka.B              File infector            10/03/01
  280.         ACAD.Pobresito            File infector            10/01/01
  281.         Bat.Nice.2634             File infector            10/01/01
  282.         Bat.Putes                 File infector            10/01/01
  283.         DT.6144                   File infector            10/01/01
  284.         Invert.622                File infector            10/01/01
  285.         Linux.Abulia              File infector            10/01/01
  286.         VBS.Aleat@mm              File infector            10/01/01
  287.         VBS.Boluc@mm              File infector            10/01/01
  288.         VBS.Funny@mm              File infector            10/01/01
  289.         VBS.IE5Grab.A             File infector            10/01/01
  290.         X97M.Adn.E                File infector            10/01/01
  291.         W97M.Dihlo                File infector            10/01/01
  292.         W97M.Doccopy.C            File infector            10/01/01
  293.         W97M.Mtrue.B              File infector            10/01/01
  294.         W97M.Vp                   File infector            10/01/01
  295.         W97M.Zeitung.E            File infector            10/01/01
  296.         WM.Wazzu.GH               File infector            10/01/01
  297.         WNT.Frangible.int         File infector            10/01/01
  298.         WNT.Pasti@mm              File infector            10/01/01
  299.         Backdoor.Oblivion         File infector            09/28/01
  300.         W32.Unce@mm               File infector            09/28/01
  301.         Bin.Auto.AQT              File infector            09/27/01
  302.         Hacktool.Rootkit          File infector            09/27/01
  303.         VBS.VBSWT                 File infector            09/27/01
  304.         VBSWT.Generator           File infector            09/27/01
  305.         W32.Twea@mm               File infector            09/27/01
  306.         Win.HLLW.Macho            File infector            09/27/01
  307.         X97M.Ellar.A              File infector            09/27/01
  308.         VBS.Blank.Gen             File infector            09/26/01
  309.         VBS.Xendi.Trojan          File infector            09/26/01
  310.         W32.Vote.B@mm             File infector            09/26/01
  311.         W32.Whiter.Trojan         File infector            09/26/01
  312.         W32.Zush@mm               File infector            09/26/01
  313.         W95.Fix2001.36864         File infector            09/26/01
  314.         W97M.Thus.ES              File infector            09/26/01
  315.         WNT.Jater                 File infector            09/26/01
  316.         Kula.Trojan               File infector            09/24/01
  317.         P98M.Eikrad               File infector            09/24/01
  318.         Shake.Trojan              File infector            09/24/01
  319.         Trex.Trojan               File infector            09/24/01
  320.         VBS.Alert.A@mm            File infector            09/24/01
  321.         VBS.Lam@mm                File infector            09/24/01
  322.         W32.Creepy@mm             File infector            09/24/01
  323.         W32.Row@mm                File infector            09/24/01
  324.         W32.Vote.A@mm             File infector            09/24/01
  325.         W97M.Remos.A              File infector            09/24/01
  326.         W97M.Volcano.A@mm         File infector            09/20/01
  327.         JS.Alert.Trojan           File infector            09/18/01
  328.         W32.Nimda.A@mm (dll)      File infector            09/18/01
  329.         W32.Nimda.A@mm (dr)       File infector            09/18/01
  330.         W32.Nimda.A@mm(html)      File infector            09/18/01
  331.         W32.Nimda.enc             File infector            09/18/01
  332.         W32.Nimda.enc(1)          File infector            09/18/01
  333.         W97M.Sting                File infector            09/18/01
  334.         Backdoor.IRC.Critical     File infector            09/18/01
  335.         W32.Kan                   File infector            09/18/01
  336.         W32.Nimda.A@mm            File infector            09/18/01
  337.         A97M.AMG.Kit              File infector            09/17/01
  338.         W2K.Ketam                 File infector            09/17/01
  339.         W97M.Ami.C                File infector            09/17/01
  340.         W97M.Fox.Trojan           File infector            09/17/01
  341.         Dilo.667                  File infector            09/17/01
  342.         Frizer.995                File infector            09/17/01
  343.         Holon.Trojan              File infector            09/17/01
  344.         W32.PAME.B                File infector            09/17/01
  345.         Backdoor.Granst           File infector            09/14/01
  346.         Backdoor.NetThief         File infector            09/14/01
  347.         Backdoor.Trojan.dr(6)     File infector            09/14/01
  348.         W32.Assic.worm            File infector            09/14/01
  349.         W32.Beavuh                File infector            09/14/01
  350.         W32.Calm                  File infector            09/14/01
  351.         W32.Fanta.worm            File infector            09/14/01
  352.         W32.Makegr                File infector            09/14/01
  353.         W95.CIH.damaged           File infector            09/14/01
  354.         W95.MTXII                 File infector            09/14/01
  355.         W97M.Minimal.BY           File infector            09/14/01
  356.         Backdoor.Scorpina         File infector            09/13/01
  357.         PWS.Cain.dr               File infector            09/13/01
  358.         DonaldD.Trojan.C          File infector            09/12/01
  359.         Hacktool.Exebind          File infector            09/12/01
  360.         VBS.Gribble               File infector            09/12/01
  361.         W97M.Ethan.EL             File infector            09/12/01
  362.         Adif.732                  File infector            09/12/01
  363.         Macro.src                 File infector            09/12/01
  364.         Trojan.IRC.Lipserf        File infector            09/12/01
  365.         Trojan.VBS.Lipserf        File infector            09/12/01
  366.         VBS.Bark                  File infector            09/12/01
  367.         VBS.Cuerpo                File infector            09/12/01
  368.         YankeeDoodle.2772         File infector            09/12/01
  369.         BAT.Ende                  File infector            09/10/01
  370.         BAT.Execom.cmp            File infector            09/10/01
  371.         BAT.Inkbatch              File infector            09/10/01
  372.         BAT.Mem2                  File infector            09/10/01
  373.         Bloodhound.Import         File infector            09/10/01
  374.         Bloodhound.OrgCopy        File infector            09/10/01
  375.         Eddy.gen (x)              File infector            09/10/01
  376.         Trojan.Bat.Rude           File infector            09/10/01
  377.         Trojan.VBS.PingBash       File infector            09/10/01        
  378.         Trojan.W97M.Abre          File infector            09/10/01
  379.         Trojan.ZeroBoot           File infector            09/10/01
  380.         Umisy.2322                File infector            09/10/01
  381.         V5M.Kolera.A              File infector            09/10/01
  382.         W97M.Cooldown             File infector            09/10/01
  383.         W97M.Ethan.EK.src         File infector            09/10/01
  384.         X97M.Bonker.gen           File infector            09/10/01
  385.         X97M.DBT.gen              File infector            09/10/01
  386.         W32.BlueCode.Worm         File infector            09/07/01
  387.         Backdoor.Y3KRat.12        File infector            09/06/01
  388.         HLL.IRC.Merlin            File infector            09/06/01
  389.         IRC.Shiver                File infector            09/06/01
  390.         Trojan.Hackin             File infector            09/06/01
  391.         VBS.Hotdog.gen            File infector            09/06/01
  392.         VBS.Loveletter.CQ         File infector            09/06/01
  393.         W95.Apop                  File infector            09/06/01
  394.         W95.CIH.corrupt           File infector            09/06/01
  395.         W97M.CaptainL             File infector            09/06/01
  396.         BugHunter.200             File infector            09/06/01
  397.         BugHunter.206             File infector            09/06/01
  398.         HiTechAssasin.453         File infector            09/06/01
  399.         SillyC.200.e              File infector            09/06/01
  400.         VBS.Trappy@mm             File infector            09/06/01
  401.         W97M.Bablas.BW            File infector            09/06/01
  402.         Alad.2293                 File infector            09/05/01
  403.         Backdoor.Trojan.dr(5)     File infector            09/05/01
  404.         Hllw.17892                File infector            09/05/01
  405.         Hllw.Naston.19000         File infector            09/05/01
  406.         IRC.Forca.Worm            File infector            09/05/01
  407.         O97M.Coco.A               File infector            09/05/01
  408.         Trojan.Badmacro           File infector            09/05/01
  409.         Trojan.Hackin             File infector            09/05/01
  410.         Trojan.Kingnoon.int       File infector            09/05/01
  411.         VBS.Reality.C             File infector            09/05/01
  412.         W97M.Arm.A                File infector            09/05/01
  413.         W97M.Automat.AGH          File infector            09/05/01
  414.         W97M.Been.A               File infector            09/05/01
  415.         W97M.Verlor.K.vbs         File infector            09/05/01
  416.         VBS.Cosa.A@mm             File infector            09/04/01
  417.         W32.Apost.Worm@mm         File infector            09/04/01
  418.         W32.Magistr.39921@mm      File infector            09/04/01
  419.         W32.Magistr.trojan        File infector            09/04/01
  420.         W97M.VMPCK1.gen           File infector            09/04/01
  421.         XM.Robocop.B              File infector            09/04/01
  422.  
  423.  
  424.  
  425.  
  426.  
  427.  
  428.  
  429.                    
  430.  
  431. Name Changes (sorted by Old Virus Name):
  432.  
  433.         Old Virus Name            New Virus Name          Date changed
  434.         --------------            --------------          ------------
  435.         Backdoor.Mandi         to Backdoor.WebDL.C         08/29/01
  436.         Backdoor.WebDL.C       to Backdoor.WebDL.Family    09/10/01
  437.         Bat.Putes              to Bat.Stupe                10/01/01
  438.         ConCon.Trojan          to Trojan.VBS.Concon        09/04/01
  439.         IRC.Acnu.Worm          to Backdoor.IRC.SubSeven    09/13/01
  440.         JS.Clid.A@mm           to VBS.Loding.B@mm          08/29/01
  441.         JV.Exception.Exploit   to JS.Exception.Exploit     08/22/01
  442.         Trojan.BAT.Regbomb.A   to BAT.Regbomb.A.Trojan     10/03/01
  443.         Trojan.Bat.AntiDN      to Bat.AntiDN.Trojan        10/03/01
  444.         Trojan.Bat.Autorun     to Bat.Autorun.Trojan       10/03/01
  445.         Trojan.Bat.BatKiller   to Bat.BatKiller.Trojan     10/03/01
  446.         Trojan.Bat.DelFiles    to Bat.DelFiles.Trojan      10/03/01
  447.         Trojan.Bat.DelFolder   to Bat.DelFolder.Trojan     10/03/01
  448.         Trojan.Bat.Delauto     to Bat.Delauto.Trojan       10/03/01
  449.         Trojan.Bat.Delini.192  to Bat.Delini.192.Trojan    10/03/01
  450.         Trojan.Bat.Delsys      to Bat.Delsys.Trojan        10/03/01
  451.         Trojan.Bat.Deltree     to Bat.Deltree.Trojan       10/03/01
  452.         Trojan.Bat.DirMaker    to Bat.DirMaker.Trojan      10/03/01
  453.         Trojan.Bat.FakeAV.A    to Bat.FakeAV.A.Trojan      10/03/01
  454.         Trojan.Bat.FakeAV.B    to Bat.FakeAV.B.Trojan      10/03/01
  455.         Trojan.Bat.HDFill      to Bat.HDFill.Trojan        10/03/01
  456.         Trojan.Bat.Hardhead    to Bat.Hardhead.Trojan      10/03/01
  457.         Trojan.Bat.Loop        to Bat.Loop.Trojan          10/03/01
  458.         Trojan.Bat.NTHack      to Bat.NTHack.Trojan        10/03/01
  459.         Trojan.Bat.NTHack.vbs  to Bat.NTHack.vbs.Trojan    10/03/01
  460.         Trojan.Bat.Phat        to Bat.Phat.Trojan          10/03/01
  461.         Trojan.Bat.QuickFormat to Bat.QuickFormat.Trojan   10/03/01
  462.         Trojan.Bat.Season.A    to Bat.Season.A.Trojan      10/03/01
  463.         Trojan.Error           to Trojan.Pounds            08/29/01
  464.         Trojan.IRC.Lipserf     to Trojan.IRC.Gribble       09/13/01
  465.         Trojan.Offensive       to Trojan.JS.Offensive      08/22/01
  466.         Trojan.VBS.Lipserf     to Trojan.VBS.Gribble       09/13/01
  467.         VBS.Alert.A@mm         to VBS.Erul.A@mm            09/26/01
  468.         VBS.AutoExec.Trojan    to Trojan.VBS.Never         08/29/01
  469.         VBS.Fujim.A@mm         to VBS.Informer.A@mm        08/10/01
  470.         VBS.Fujimori.A@mm      to VBS.Fujim.A@mm           08/08/01
  471.         VBS.IO.A@mm            to VBS.Thea.A               08/22/01
  472.         VBS.LoveLetter.Variant to VBS.LoveLetter.Var       09/12/01
  473.         VBS.Loveletter.ini     to IRC.Worm.gen             09/10/01
  474.         VBS.Mensa.A@mm         to VBS.Proud.A@mm           08/22/01
  475.         VBS.Merlin.C.Int       to VBS.XPJunexp.C.Int       08/10/01
  476.         VBS.Merlin.D@mm        to VBS.Merlin.C@mm          08/10/01
  477.         VBS.Peace.Worm         to VBS.Elimence.A           08/31/01
  478.         VBS.Rewind.A@mm        to VBS.SSIWG.gen@mm         08/17/01
  479.         VBS.Ruzz               to VBS.Fiber.A              08/13/01
  480.         VBS.SNights            to VBS.Zync.A               08/22/01
  481.         VBS.Wordsworth         to VBS.Yello                08/13/01
  482.         VBS.Zulu.pdf@mm        to VBS.PeachyPDF@mm         08/08/01
  483.         W2K.Stream.A           to W2K.Strea                09/26/01
  484.         W32.Pimpo@mm           to W32.Pimpol.B@mm          08/05/01
  485.         W32.Ralvek.int         to W32.Pet_Tick.M           08/24/01
  486.         W32.Vote.A@mm          to W32.Vote.gen@mm          09/27/01
  487.         W97M.CaptainL          to W97M.Ethan.EK            09/10/01
  488.         W97M.Epik.A            to O97M.Epik.A              09/06/01
  489.         W97M.Ethan.EL          to VBS.Bluemail.A@mm        09/26/01
  490.         W97M.Gub               to O97M.Gub                 10/03/01
  491.         W97M.Minimal.AX.gen    to W97M.Minimal.AX          08/13/01
  492.         W97M.Philippines.A     to W97M.Liberate.A          10/03/01
  493.         W97M.Remos.A           to W97M.Ethan.EL (2)        09/26/01
  494.         W97M.Thus.ES           to W97M.Thus.FC             10/01/01
  495.         W97M.Thus.FA@mm        to W97M.Cruson.A@mm         08/29/01
  496.         W97M.Volcano.A@mm      to W97M.Camino.A@mm         09/24/01
  497.         X97M.Automat.AH        to X97M.Divi.I              10/03/01
  498.         X97M.Automat.AK        to X97M.Divi.K              10/03/01
  499.         X97M.DIVI.K            to X97M.DIVI.Family         10/03/01
  500.         X97M.Yawn.gen          to XM.Yawn                  08/17/01
  501.         XM.Automat.S           to XM.Clonar.A              10/03/01
  502.         XM.Diablos             to XM.Diablo.gen            10/03/01
  503.         XM.Tabej.B             to XM.Tabej.C               10/03/01
  504.         XM.Tabej.C             to XM.Tabej.B               10/03/01
  505.         XM.Yawn                to XM.Yawn.Family           10/03/01
  506. Name Changes (sorted by Date changed):
  507.  
  508.         Old Virus Name            New Virus Name          Date changed
  509.         --------------            --------------          ------------
  510.         Trojan.BAT.Regbomb.A   to BAT.Regbomb.A.Trojan     10/03/01
  511.         Trojan.Bat.AntiDN      to Bat.AntiDN.Trojan        10/03/01
  512.         Trojan.Bat.Autorun     to Bat.Autorun.Trojan       10/03/01
  513.         Trojan.Bat.BatKiller   to Bat.BatKiller.Trojan     10/03/01
  514.         Trojan.Bat.DelFiles    to Bat.DelFiles.Trojan      10/03/01
  515.         Trojan.Bat.DelFolder   to Bat.DelFolder.Trojan     10/03/01
  516.         Trojan.Bat.Delauto     to Bat.Delauto.Trojan       10/03/01
  517.         Trojan.Bat.Delini.192  to Bat.Delini.192.Trojan    10/03/01
  518.         Trojan.Bat.Delsys      to Bat.Delsys.Trojan        10/03/01
  519.         Trojan.Bat.Deltree     to Bat.Deltree.Trojan       10/03/01
  520.         Trojan.Bat.DirMaker    to Bat.DirMaker.Trojan      10/03/01
  521.         Trojan.Bat.FakeAV.A    to Bat.FakeAV.A.Trojan      10/03/01
  522.         Trojan.Bat.FakeAV.B    to Bat.FakeAV.B.Trojan      10/03/01
  523.         Trojan.Bat.HDFill      to Bat.HDFill.Trojan        10/03/01
  524.         Trojan.Bat.Hardhead    to Bat.Hardhead.Trojan      10/03/01
  525.         Trojan.Bat.Loop        to Bat.Loop.Trojan          10/03/01
  526.         Trojan.Bat.NTHack      to Bat.NTHack.Trojan        10/03/01
  527.         Trojan.Bat.NTHack.vbs  to Bat.NTHack.vbs.Trojan    10/03/01
  528.         Trojan.Bat.Phat        to Bat.Phat.Trojan          10/03/01
  529.         Trojan.Bat.QuickFormat to Bat.QuickFormat.Trojan   10/03/01
  530.         Trojan.Bat.Season.A    to Bat.Season.A.Trojan      10/03/01
  531.         W97M.Gub               to O97M.Gub                 10/03/01
  532.         W97M.Philippines.A     to W97M.Liberate.A          10/03/01
  533.         X97M.Automat.AH        to X97M.Divi.I              10/03/01
  534.         X97M.Automat.AK        to X97M.Divi.K              10/03/01
  535.         X97M.DIVI.K            to X97M.DIVI.Family         10/03/01
  536.         XM.Automat.S           to XM.Clonar.A              10/03/01
  537.         XM.Diablos             to XM.Diablo.gen            10/03/01
  538.         XM.Tabej.B             to XM.Tabej.C               10/03/01
  539.         XM.Tabej.C             to XM.Tabej.B               10/03/01
  540.         XM.Yawn                to XM.Yawn.Family           10/03/01
  541.         Bat.Putes              to Bat.Stupe                10/01/01
  542.         W97M.Thus.ES           to W97M.Thus.FC             10/01/01
  543.         W32.Vote.A@mm          to W32.Vote.gen@mm          09/27/01
  544.         VBS.Alert.A@mm         to VBS.Erul.A@mm            09/26/01
  545.         W2K.Stream.A           to W2K.Strea                09/26/01
  546.         W97M.Ethan.EL          to VBS.Bluemail.A@mm        09/26/01
  547.         W97M.Remos.A           to W97M.Ethan.EL (2)        09/26/01
  548.         W97M.Volcano.A@mm      to W97M.Camino.A@mm         09/24/01
  549.         IRC.Acnu.Worm          to Backdoor.IRC.SubSeven    09/13/01
  550.         Trojan.IRC.Lipserf     to Trojan.IRC.Gribble       09/13/01
  551.         Trojan.VBS.Lipserf     to Trojan.VBS.Gribble       09/13/01
  552.         VBS.LoveLetter.Variant to VBS.LoveLetter.Var       09/12/01
  553.         Backdoor.WebDL.C       to Backdoor.WebDL.Family    09/10/01
  554.         VBS.Loveletter.ini     to IRC.Worm.gen             09/10/01
  555.         W97M.CaptainL          to W97M.Ethan.EK            09/10/01
  556.         W97M.Epik.A            to O97M.Epik.A              09/06/01
  557.         ConCon.Trojan          to Trojan.VBS.Concon        09/04/01
  558.         VBS.Peace.Worm         to VBS.Elimence.A           08/31/01
  559.         Backdoor.Mandi         to Backdoor.WebDL.C         08/29/01
  560.         JS.Clid.A@mm           to VBS.Loding.B@mm          08/29/01
  561.         Trojan.Error           to Trojan.Pounds            08/29/01
  562.         VBS.AutoExec.Trojan    to Trojan.VBS.Never         08/29/01
  563.         W97M.Thus.FA@mm        to W97M.Cruson.A@mm         08/29/01
  564.         W32.Ralvek.int         to W32.Pet_Tick.M           08/24/01
  565.         JV.Exception.Exploit   to JS.Exception.Exploit     08/22/01
  566.         Trojan.Offensive       to Trojan.JS.Offensive      08/22/01
  567.         VBS.SNights            to VBS.Zync.A               08/22/01
  568.         VBS.IO.A@mm            to VBS.Thea.A               08/22/01
  569.         VBS.Mensa.A@mm         to VBS.Proud.A@mm           08/22/01
  570.         VBS.Rewind.A@mm        to VBS.SSIWG.gen@mm         08/17/01
  571.         X97M.Yawn.gen          to XM.Yawn                  08/17/01
  572.         VBS.Ruzz               to VBS.Fiber.A              08/13/01
  573.         VBS.Wordsworth         to VBS.Yello                08/13/01
  574.         W97M.Minimal.AX.gen    to W97M.Minimal.AX          08/13/01
  575.         VBS.Fujim.A@mm         to VBS.Informer.A@mm        08/10/01
  576.         VBS.Merlin.C.Int       to VBS.XPJunexp.C.Int       08/10/01
  577.         VBS.Merlin.D@mm        to VBS.Merlin.C@mm          08/10/01
  578.         VBS.Fujimori.A@mm      to VBS.Fujim.A@mm           08/08/01
  579.         VBS.Zulu.pdf@mm        to VBS.PeachyPDF@mm         08/08/01
  580.         W32.Pimpo@mm           to W32.Pimpol.B@mm          08/05/01
  581.  
  582.  
  583.         
  584.         
  585. Deletions (sorted by Virus Name):
  586.  
  587.         Virus Name                Infection Type          Date removed
  588.         ----------                --------------          ------------    
  589.         A97M.Amg.A                File infector            06/15/01
  590.         Backdoor.Teste            File infector            08/24/01     
  591.         CLS.Win.Joke.34520(1)     File infector            07/17/01
  592.         CLS.Win.Joke.34520(2)     File infector            07/17/01
  593.         Eumel.363.A               File infector            08/20/01
  594.         Invalid Certificate       File infector            05/14/01
  595.         MtE.Groove (5)            File infector            06/05/01
  596.         PWS.Cain.dr               File infector            09/17/01
  597.         Sailor.1108               File infector            08/22/01 
  598.         Trojan.Billrus.Texto      File infector            07/13/01
  599.         Trojan.VBS.Autoexec       File infector            08/29/01
  600.         Unlucky.2008 (2)          File infector            06/11/01
  601.         Unlucky.2008 (3)          File infector            06/11/01     
  602.         W32.Antiqfx.B.worm        File infector            08/01/01
  603.         W32.Antiqfx.C.worm        File infector            08/01/01
  604.         W32.Bedtime.2304          File infector            07/02/01
  605.         W32.Vote.B@mm             File infector            09/27/01
  606.         W95.Mul.2012              File infector            05/31/01
  607.         W95.Smoker.Worm@mm        File infector            07/12/01
  608.         WM.Kam                    File infector            08/20/01
  609.         X97M.Activated.A          File infector            10/03/01
  610.         X97M.DIVI.J               File infector            10/03/01
  611.         X97M.Divi.G               File infector            10/03/01
  612.         X97M.Divi.M               File infector            10/03/01
  613.         Yosha.761                 File infector            08/22/01    
  614.        
  615.  
  616.         
  617.  
  618.  
  619. Deletions (sorted by Date removed):
  620.  
  621.         Virus Name                Infection Type          Date removed
  622.         ----------                --------------          ------------
  623.         X97M.Activated.A          File infector            10/03/01
  624.         X97M.DIVI.J               File infector            10/03/01
  625.         X97M.Divi.G               File infector            10/03/01
  626.         X97M.Divi.M               File infector            10/03/01
  627.         W32.Vote.B@mm             File infector            09/27/01
  628.         PWS.Cain.dr               File infector            09/17/01
  629.         Trojan.VBS.Autoexec       File infector            08/29/01
  630.         Backdoor.Teste            File infector            08/24/01     
  631.         Sailor.1108               File infector            08/22/01 
  632.         Yosha.761                 File infector            08/22/01  
  633.         Eumel.363.A               File infector            08/20/01
  634.         WM.Kam                    File infector            08/20/01
  635.         W32.Antiqfx.B.worm        File infector            08/01/01
  636.         W32.Antiqfx.C.worm        File infector            08/01/01
  637.         CLS.Win.Joke.34520(1)     File infector            07/17/01
  638.         CLS.Win.Joke.34520(2)     File infector            07/17/01
  639.         Trojan.Billrus.Texto      File infector            07/13/01
  640.         W95.Smoker.Worm@mm        File infector            07/12/01
  641.         W32.Bedtime.2304          File infector            07/02/01
  642.         A97M.Amg.A                File infector            06/15/01
  643.         Unlucky.2008 (2)          File infector            06/11/01
  644.         Unlucky.2008 (3)          File infector            06/11/01     
  645.         MtE.Groove (5)            File infector            06/05/01
  646.         W95.Mul.2012              File infector            05/31/01
  647.         Invalid Certificate       File infector            05/14/01
  648.  
  649.  
  650.  
  651. **********************************************************************
  652. **  Enabling Scanning Features                                      **
  653. **********************************************************************
  654.  
  655. Several scanning features can be enabled through the use of an INF 
  656. configuration file.  For NAV for Windows 95/NT version 4.x and later, 
  657. or NAV for OS/2, this configuration file should be called NAVEX15.INF
  658. and should be placed in the directory where NAV is installed (i.e.,
  659. C:\Program Files\Norton AntiVirus).  For NAV for Netware version 4.x,
  660. the file should be called NAVEX15.INF and should be placed in the 
  661. directory where NAV 4.x is installed (i.e., sys:system\navnlm). For
  662. NAV for Windows 95/NT version 2.0, NAV 4.x for Windows 3.1/DOS,
  663. NAVIEG 1.x, or NAVFW 1.x, the file should be named NAVEX.INF and
  664. should be placed in the directory where NAV is installed (i.e., C:\NAV).
  665. If this configuration file does not exist, create one in the appropriate
  666. directory if you want to change the default settings.
  667.  
  668. To enable a scanning feature for a particular component, one or more 
  669. entries need to be added to the configuration file under the correct
  670. section.  For each platform there is a corresponding section that is used 
  671. in the INF file.  Below is a table of section names and platforms.
  672.  
  673. Section Name    Platform
  674. ------------    --------
  675. NAVW32          Windows 95/98/NT
  676. NAVAP           Windows 95/98/NT Auto-Protect
  677. NAVDX           DOS
  678. NAVNLM          Netware
  679. NAVWIN          Windows 3.1
  680. NAVOS2          OS/2
  681. NAVAIX          AIX
  682. NAVSOL          Solaris
  683.  
  684. Entries are case insensitive.  Below is a description of possible 
  685. entries.
  686.  
  687. 1. Files can be excluded from scans by the NAVEX engine.  To exclude a
  688. specific file from the NAVEX engine scan, add an entry with the full
  689. path and file name.  This is case insensitive.  No wildcards are allowed.
  690. To exclude multiple files, add a separate entry for each file.  To exclude
  691. a file, add an entry like the one below where <PATH> is the full path
  692. and file name.
  693.         ExcludeFile = <PATH>
  694.  
  695. 2. Files within a directory can be excluded from scans by the NAVEX engine.
  696. To exclude all files within a directory, add an entry with the full 
  697. directory path.  This is case insensitive.  No wildcards are allowed.  This
  698. does not exclude files located in subdirectories of the specified 
  699. directory.  To exclude multiple directories, add a separate entry for each
  700. directory. To exclude a directory, add an entry like the one below where
  701. <DIRECTORY> is the full path.
  702.         ExcludeDirectory = <DIRECTORY>
  703.  
  704. The following example of an INF configuration file excludes two files, 
  705. NOSCAN.EXE and BIGFILE.DOC, from NAVEX scans for the Windows 95/98/NT 
  706. scanner.  It excludes the D:\PRIVATE directory from Windows 95/98/NT 
  707. Auto-Protect.
  708.  
  709. [NAVW32]
  710. ExcludeFile = C:\PROGRAM FILES\NOSCAN.EXE
  711. ExcludeFile = C:\TEMP\BIGFILE.DOC
  712.  
  713. [NAVAP]
  714. ExcludeDirectory = D:\PRIVATE
  715.  
  716. **********************************************************************
  717. **    Additional Information                                        **
  718. **********************************************************************
  719.  
  720. Additional information regarding this virus definitions update can be
  721. found in UPDATE.TXT and TECHNOTE.TXT.
  722.  
  723.  
  724.  
  725.  
  726.  
  727.  
  728.  
  729.  
  730.  
  731.  
  732.  
  733.  
  734.  
  735.  
  736.  
  737.  
  738.  
  739.  
  740.  
  741.  
  742.  
  743.  
  744.  
  745.  
  746.  
  747.  
  748.  
  749.  
  750.  
  751.  
  752.  
  753.  
  754.  
  755.  
  756.  
  757.  
  758.  
  759.  
  760.  
  761.  
  762.  
  763.  
  764.  
  765.