home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
PC World 2001 December
/
PCWorld_2001-12_cd.bin
/
Software
/
Antiviry
/
nav32
/
1101i32.exe
/
whatsnew.txt
< prev
next >
Wrap
Text File
|
2001-11-01
|
52KB
|
886 lines
**********************************************************************
** **
** What's New in the NAV Virus Definitions Files WHATSNEW.TXT **
** **
** Symantec AntiVirus Research Center (SARC) November 01, 2001 **
** **
**********************************************************************
This document contains the following topics:
* Virus Alerts
* New Technologies
* Changes Incorporated Into This Update
* Enabling Scanning Features
* Additional Information
**********************************************************************
** Virus Alerts **
**********************************************************************
The ten most commonly reported viruses, worldwide:
1 W95.Hybris.worm
2 W95.MTX
3 Wscript.KakWorm
4 W32.HLLW.Bymer
5 W32.Magistr.24876@mm
6 W32.Badtrans.13312@mm
7 W32.Navidad.16896
8 Happy99.Worm
9 VBS.LoveLetter
10 W32.HLLW.Qaz
**********************************************************************
** New Technologies **
**********************************************************************
DATE Technologies Added
---- ------------------
02/18/99 * Detection and repair of macro viruses in Word and Excel
2000 documents.
05/15/99 * Added repair for PowerPoint viruses.
* Improved heuristics to detect more WORD 97 related
viruses.
06/10/99 * Menu repair technology for WORD macro viruses that change
command bar customizations in NORMAL.DOT.
07/12/99 * Added support for scanning of Ichitaro 8/9 documents.
(Ichitaro is a Japanese word processing program).
08/19/99 * Added detection and repair for embedded documents inside
PowerPoint 97.
11/22/99 * Added detection and repair for Trojans embedded in OLE
files, such as Windows scrap files and MS Office
documents.
* Added detection for viruses which infect Microsoft
Project documents (P98M.Corner.A, for example).
02/10/00 * Added support for scanning of UNIX executables.
* Added detection for infected Visio documents.
12/18/00 * Added heuristics for for 32-bit Windows viruses.
* Added a script scanner which increases our capabilities for
detecting script based threats.
08/02/01 * Engine Update 08/02/01
* All products that use the NAVEX 1.5 architecture
(in other words, most major Symantec products released over
the last 3 - 4 years) will receive the new functionality.
* This enhanced technology provides improved script scanning
as well as more proactive detection of unknown script-based
threats.
**********************************************************************
** Changes Incorporated Into This Virus Definitions Update **
**********************************************************************
DATE
----
New virus definitions (sorted by Virus Name):
Virus Name Infection Type Date added
---------- -------------- ----------
ABT.397 File infector 10/18/01
Altx.2297 File infector 10/23/01
Altx.2606 File infector 10/23/01
Altx.2900 File infector 10/16/01
AntiPas.1108 File infector 10/16/01
Ari.1962 File infector 10/24/01
Ash.270.C File infector 10/18/01
Avcs.268 File infector 10/12/01
Avcs.275 File infector 10/12/01
Avcs.288 File infector 10/24/01
Avlanche.2531 File infector 10/24/01
BAT.Boluc File infector 10/18/01
BAT.Cream.D File infector 10/31/01
Backdoor.Destiny File infector 10/15/01
Backdoor.Litmus File infector 10/18/01
Backdoor.Slackbot.10 File infector 10/10/01
Backdoor.Slackbot.B File infector 10/10/01
Backdoor.Systsec File infector 10/10/01
Barrotes.1310.K File infector 10/22/01
Bat.Babomb File infector 10/31/01
Bat.Goma File infector 10/25/01
Bat.Goofy File infector 10/24/01
Bat.Reinfector File infector 10/25/01
Bat.Soliton File infector 10/24/01
Bat.Spamacid.Trojan File infector 10/25/01
Bat.Sys.602 File infector 10/24/01
Bat.Zekezip File infector 10/25/01
Bat.Zop File infector 10/25/01
Bin.Auto.AQU File infector 10/11/01
Bin.Auto.AQV File infector 10/19/01
Bin.Auto.AQW File infector 10/19/01
Bin.Auto.AQX File infector 10/19/01
Bin.Auto.AQY File infector 10/19/01
Bin.Auto.AQZ File infector 10/19/01
Bin.Auto.ARA File infector 10/19/01
Bin.Auto.ARB File infector 10/19/01
Bin.Auto.ARC File infector 10/29/01
Bin.Auto.ARD File infector 10/29/01
Bin.Auto.ARE File infector 10/29/01
Bin.Auto.ARF File infector 10/29/01
Bin.Auto.ARG File infector 10/29/01
Bin.Auto.ARH File infector 10/29/01
Bin.Auto.ARI File infector 10/29/01
Bin.Auto.ARJ File infector 10/29/01
Bin.Auto.ARK File infector 10/29/01
Bin.Auto.ARL File infector 10/29/01
Bin.Auto.ARM File infector 10/29/01
Callfast.3959 File infector 10/17/01
CodeBreaker.404 File infector 10/17/01
CyberTech.224.C File infector 10/18/01
DA.282.A File infector 10/18/01
Dead.309 File infector 10/17/01
Deicide.1433 File infector 10/24/01
DemoCrazy.226 File infector 10/24/01
Dolphin.566 File infector 10/24/01
Dolphin.573 File infector 10/24/01
Doshunter.483.B File infector 10/17/01
Dreamer.4809 File infector 10/22/01
Dutch Tiny.163.M File infector 10/24/01
Dutch Tiny.207.A File infector 10/17/01
Duwende.409.F File infector 10/17/01
Eda.718 File infector 10/22/01
Emulator.249 File infector 10/17/01
Enmity.843 File infector 10/17/01
Erase.669.B File infector 10/24/01
Escape.3200 File infector 10/18/01
FGIU.2642 File infector 10/15/01
Gobleen.413 File infector 10/17/01
Guben.259 File infector 10/22/01
HLLP.6064 File infector 10/15/01
IRC.Glitch.Trojan File infector 10/12/01
InvadeZip.698 File infector 10/26/01
Iotm.1009.B File infector 10/25/01
JS.Mailbomb.Trojan File infector 10/25/01
Juhuu.317 File infector 10/25/01
Karud.1559 File infector 10/18/01
Kazakhstan.2352 File infector 10/18/01
Khizres.1147 File infector 10/18/01
Khizres.1179 File infector 10/18/01
Kolumb.1100 File infector 10/18/01
Kungar.Trojan Boot infector 10/22/01
Lahyani.1228 File infector 10/25/01
Lawine.2259 File infector 10/25/01
Lawine.2642 File infector 10/25/01
Leen.502 File infector 10/25/01
Leen.507 File infector 10/25/01
Leen.636 File infector 10/25/01
Leen.637 File infector 10/25/01
Lyli.480 File infector 10/17/01
Made.334.C File infector 10/18/01
Mahon.1364.B File infector 10/25/01
Mephisto.949 File infector 10/18/01
Mephisto.957 File infector 10/18/01
Mini.88.E File infector 10/25/01
Moloch (3) Boot infector 10/25/01
Mosquito.354 File infector 10/19/01
NLM.Burglar.Trojan File infector 10/23/01
Netbus.Patcher File infector 10/23/01
Nomad.1241 File infector 10/19/01
Obmar.1960 File infector 10/16/01
PHP.Redz File infector 10/26/01
PP97.PMG.Kit File infector 10/26/01
PS-MPC.550 File infector 10/29/01
PWSteal.KMW.A File infector 10/18/01
PWSteal.KMW.B File infector 10/18/01
Perl.Agni.Worm File infector 10/24/01
Phreak.Trojan File infector 10/29/01
Relax.884 File infector 11/01/01
SME.Demo File infector 11/01/01
SSS.547 File infector 10/17/01
Septer.Trojan File infector 10/18/01
Suriv.512 File infector 10/17/01
Szoveg.959 File infector 10/17/01
Trivial.84(3) File infector 10/12/01
Trojan Horse Corrupted File infector 10/31/01
V.621 File infector 10/19/01
VBS.Dayumi File infector 10/22/01
VBS.Lee.B@mm File infector 10/15/01
VBS.Lee@mm File infector 10/15/01
VBS.Loveletter.CV@mm File infector 10/17/01
VBS.Masteal.Trojan File infector 10/18/01
VBS.Natiday.A@mm File infector 10/10/01
VBS.Redoc.A@m File infector 10/18/01
VBS.Redoc.Kit File infector 10/23/01
VBS.Retnal.A@mm File infector 10/22/01
VBS.VWC.A@mm File infector 10/15/01
VBS.Verysites.int File infector 10/18/01
VBS.Zeta.A@mm File infector 11/01/01
VCL.Gabber.529 File infector 10/18/01
VNU.412 File infector 10/19/01
VNU.418 File infector 10/19/01
VNU.422 File infector 10/19/01
W32.Anset.Worm File infector 10/25/01
W32.Desire.Mirc File infector 10/10/01
W32.DpBot.Trojan File infector 10/22/01
W32.ElKern.3326 File infector 10/26/01
W32.ElKern.3326 (dr) File infector 10/26/01
W32.Enviar.A File infector 10/31/01
W32.Faker.intended File infector 10/18/01
W32.Finaldo File infector 10/29/01
W32.HLLW.Flik File infector 10/18/01
W32.Hermes.D@mm File infector 10/10/01
W32.Jasmine File infector 10/10/01
W32.JavaKiller.Trojan File infector 10/11/01
W32.Kiray@mm File infector 10/23/01
W32.Klez.A@mm File infector 10/26/01
W32.Klinge File infector 10/17/01
W32.Lena File infector 10/10/01
W32.Libi File infector 10/23/01
W32.NGVCK.Kit File infector 10/26/01
W32.Nimda.C@mm File infector 10/15/01
W32.Nimda.E@mm File infector 10/29/01
W32.Nimda.E@mm (dr) File infector 11/01/01
W32.Paukor@mm File infector 10/29/01
W32.Pinfi File infector 10/12/01
W32.Redesi.B@mm File infector 10/19/01
W32.Redesi.gen File infector 10/23/01
W32.Redesi@mm File infector 10/18/01
W32.SST@mm (dr) File infector 11/01/01
W32.Small.1416 File infector 10/16/01
W32.Toal.A@mm File infector 10/23/01
W32.Toal.A@mm (gen1) File infector 10/24/01
W32.Toviz.A@mm File infector 10/22/01
W32.Triton File infector 10/25/01
W32.Vote.C.int File infector 10/22/01
W95.Angriff File infector 10/10/01
W95.Dedobe File infector 10/22/01
W95.Kurgan File infector 10/19/01
W95.Tabeci.2683 File infector 10/29/01
W95.Whog File infector 10/18/01
W95.XORO File infector 10/11/01
W97M.Alamat.B File infector 10/18/01
W97M.Anemic.Kit.intd File infector 10/26/01
W97M.Apoc.A File infector 10/16/01
W97M.Automat.AGI File infector 10/12/01
W97M.Blowup File infector 10/11/01
W97M.Bottra.D File infector 10/10/01
W97M.Bridge.C File infector 10/31/01
W97M.Cerin.A File infector 10/29/01
W97M.Concept.DQ File infector 10/31/01
W97M.Copyme.A File infector 10/22/01
W97M.Dancer.A.gen File infector 10/31/01
W97M.Dancer.H File infector 10/31/01
W97M.Fatal.A File infector 10/16/01
W97M.Flop.A File infector 10/16/01
W97M.Gdd.A File infector 10/16/01
W97M.Grac.A File infector 10/12/01
W97M.HMVC.Kit File infector 10/24/01
W97M.Hope.W File infector 10/31/01
W97M.Inspector.gen File infector 10/24/01
W97M.Jishe.C File infector 10/22/01
W97M.Lime.Kit File infector 10/24/01
W97M.Marker.JM File infector 10/31/01
W97M.Newhope.I File infector 10/16/01
W97M.Notme.A File infector 10/16/01
W97M.Opey.dam File infector 10/15/01
W97M.Pck.kit File infector 10/18/01
W97M.Rascal.A File infector 10/16/01
W97M.Rusmod.A:Ru File infector 10/19/01
W97M.Specmill.A File infector 10/16/01
W97M.Tech.G File infector 10/31/01
W97M.Telosa.A File infector 10/23/01
W97M.Thelar.A File infector 10/11/01
W97M.Thus.FG File infector 10/22/01
W97M.Tonor.B File infector 10/31/01
W97M.Wrdo.B File infector 10/31/01
W97M.Zerco.A File infector 10/18/01
WM.MWVCK.A File infector 10/26/01
WM.MWVCK.Kit.B File infector 10/26/01
WitRemor.595 File infector 10/19/01
X97M.Codemas.D File infector 11/01/01
X97M.Ramboo.A File infector 10/11/01
X97M.Short.A File infector 10/11/01
X97M.Teu.A File infector 10/18/01
Zeton.Mirc File infector 10/15/01
New virus definitions (sorted by Date added):
Virus Name Infection Type Date added
---------- -------------- ----------
Relax.884 File infector 11/01/01
SME.Demo File infector 11/01/01
VBS.Zeta.A@mm File infector 11/01/01
W32.Nimda.E@mm (dr) File infector 11/01/01
W32.SST@mm (dr) File infector 11/01/01
X97M.Codemas.D File infector 11/01/01
BAT.Cream.D File infector 10/31/01
Bat.Babomb File infector 10/31/01
Trojan Horse Corrupted File infector 10/31/01
W32.Enviar.A File infector 10/31/01
W97M.Bridge.C File infector 10/31/01
W97M.Concept.DQ File infector 10/31/01
W97M.Dancer.A.gen File infector 10/31/01
W97M.Dancer.H File infector 10/31/01
W97M.Hope.W File infector 10/31/01
W97M.Marker.JM File infector 10/31/01
W97M.Tech.G File infector 10/31/01
W97M.Tonor.B File infector 10/31/01
W97M.Wrdo.B File infector 10/31/01
Bin.Auto.ARC File infector 10/29/01
Bin.Auto.ARD File infector 10/29/01
Bin.Auto.ARE File infector 10/29/01
Bin.Auto.ARF File infector 10/29/01
Bin.Auto.ARG File infector 10/29/01
Bin.Auto.ARH File infector 10/29/01
Bin.Auto.ARI File infector 10/29/01
Bin.Auto.ARJ File infector 10/29/01
Bin.Auto.ARK File infector 10/29/01
Bin.Auto.ARL File infector 10/29/01
Bin.Auto.ARM File infector 10/29/01
Phreak.Trojan File infector 10/29/01
W32.Paukor@mm File infector 10/29/01
W95.Tabeci.2683 File infector 10/29/01
W97M.Cerin.A File infector 10/29/01
PS-MPC.550 File infector 10/29/01
W32.Nimda.E@mm File infector 10/29/01
W32.Finaldo File infector 10/29/01
InvadeZip.698 File infector 10/26/01
PHP.Redz File infector 10/26/01
PP97.PMG.Kit File infector 10/26/01
W32.ElKern.3326 File infector 10/26/01
W32.ElKern.3326 (dr) File infector 10/26/01
W32.Klez.A@mm File infector 10/26/01
W32.NGVCK.Kit File infector 10/26/01
W97M.Anemic.Kit.intd File infector 10/26/01
WM.MWVCK.A File infector 10/26/01
WM.MWVCK.Kit.B File infector 10/26/01
Iotm.1009.B File infector 10/25/01
Juhuu.317 File infector 10/25/01
Lahyani.1228 File infector 10/25/01
Lawine.2259 File infector 10/25/01
Lawine.2642 File infector 10/25/01
Leen.502 File infector 10/25/01
Leen.507 File infector 10/25/01
Leen.636 File infector 10/25/01
Leen.637 File infector 10/25/01
Mahon.1364.B File infector 10/25/01
Mini.88.E File infector 10/25/01
Moloch (3) Boot infector 10/25/01
Bat.Zekezip File infector 10/25/01
Bat.Zop File infector 10/25/01
Bat.Goma File infector 10/25/01
Bat.Reinfector File infector 10/25/01
Bat.Spamacid.Trojan File infector 10/25/01
JS.Mailbomb.Trojan File infector 10/25/01
W32.Anset.Worm File infector 10/25/01
W32.Triton File infector 10/25/01
Ari.1962 File infector 10/24/01
Avcs.288 File infector 10/24/01
Avlanche.2531 File infector 10/24/01
Bat.Goofy File infector 10/24/01
Bat.Soliton File infector 10/24/01
Bat.Sys.602 File infector 10/24/01
Deicide.1433 File infector 10/24/01
DemoCrazy.226 File infector 10/24/01
Dolphin.566 File infector 10/24/01
Dolphin.573 File infector 10/24/01
Dutch Tiny.163.M File infector 10/24/01
Erase.669.B File infector 10/24/01
Perl.Agni.Worm File infector 10/24/01
W32.Toal.A@mm (gen1) File infector 10/24/01
W97M.HMVC.Kit File infector 10/24/01
W97M.Inspector.gen File infector 10/24/01
W97M.Lime.Kit File infector 10/24/01
Altx.2297 File infector 10/23/01
Altx.2606 File infector 10/23/01
NLM.Burglar.Trojan File infector 10/23/01
Netbus.Patcher File infector 10/23/01
VBS.Redoc.Kit File infector 10/23/01
W32.Kiray@mm File infector 10/23/01
W32.Libi File infector 10/23/01
W32.Redesi.gen File infector 10/23/01
W32.Toal.A@mm File infector 10/23/01
W97M.Telosa.A File infector 10/23/01
VBS.Dayumi File infector 10/22/01
VBS.Retnal.A@mm File infector 10/22/01
W32.DpBot.Trojan File infector 10/22/01
Barrotes.1310.K File infector 10/22/01
Dreamer.4809 File infector 10/22/01
Eda.718 File infector 10/22/01
Guben.259 File infector 10/22/01
Kungar.Trojan Boot infector 10/22/01
W32.Toviz.A@mm File infector 10/22/01
W32.Vote.C.int File infector 10/22/01
W95.Dedobe File infector 10/22/01
W97M.Copyme.A File infector 10/22/01
W97M.Jishe.C File infector 10/22/01
W97M.Thus.FG File infector 10/22/01
WitRemor.595 File infector 10/19/01
Nomad.1241 File infector 10/19/01
Mosquito.354 File infector 10/19/01
V.621 File infector 10/19/01
VNU.422 File infector 10/19/01
VNU.418 File infector 10/19/01
VNU.412 File infector 10/19/01
W32.Redesi.B@mm File infector 10/19/01
W97M.Rusmod.A:Ru File infector 10/19/01
W95.Kurgan File infector 10/19/01
Bin.Auto.AQV File infector 10/19/01
Bin.Auto.AQW File infector 10/19/01
Bin.Auto.AQX File infector 10/19/01
Bin.Auto.AQY File infector 10/19/01
Bin.Auto.AQZ File infector 10/19/01
Bin.Auto.ARA File infector 10/19/01
Bin.Auto.ARB File infector 10/19/01
ABT.397 File infector 10/18/01
Ash.270.C File infector 10/18/01
BAT.Boluc File infector 10/18/01
Backdoor.Litmus File infector 10/18/01
CyberTech.224.C File infector 10/18/01
DA.282.A File infector 10/18/01
Escape.3200 File infector 10/18/01
Karud.1559 File infector 10/18/01
Kazakhstan.2352 File infector 10/18/01
Khizres.1147 File infector 10/18/01
Khizres.1179 File infector 10/18/01
Kolumb.1100 File infector 10/18/01
Made.334.C File infector 10/18/01
Mephisto.949 File infector 10/18/01
Mephisto.957 File infector 10/18/01
PWSteal.KMW.A File infector 10/18/01
PWSteal.KMW.B File infector 10/18/01
Septer.Trojan File infector 10/18/01
VBS.Masteal.Trojan File infector 10/18/01
VBS.Redoc.A@m File infector 10/18/01
VBS.Verysites.int File infector 10/18/01
VCL.Gabber.529 File infector 10/18/01
W32.Faker.intended File infector 10/18/01
W32.HLLW.Flik File infector 10/18/01
W32.Redesi@mm File infector 10/18/01
W95.Whog File infector 10/18/01
W97M.Alamat.B File infector 10/18/01
W97M.Pck.kit File infector 10/18/01
W97M.Zerco.A File infector 10/18/01
X97M.Teu.A File infector 10/18/01
Dutch Tiny.207.A File infector 10/17/01
Callfast.3959 File infector 10/17/01
Doshunter.483.B File infector 10/17/01
Dead.309 File infector 10/17/01
Duwende.409.F File infector 10/17/01
Emulator.249 File infector 10/17/01
Enmity.843 File infector 10/17/01
CodeBreaker.404 File infector 10/17/01
Lyli.480 File infector 10/17/01
Gobleen.413 File infector 10/17/01
Szoveg.959 File infector 10/17/01
Suriv.512 File infector 10/17/01
SSS.547 File infector 10/17/01
VBS.Loveletter.CV@mm File infector 10/17/01
W32.Klinge File infector 10/17/01
Altx.2900 File infector 10/16/01
AntiPas.1108 File infector 10/16/01
Obmar.1960 File infector 10/16/01
W32.Small.1416 File infector 10/16/01
W97M.Apoc.A File infector 10/16/01
W97M.Fatal.A File infector 10/16/01
W97M.Flop.A File infector 10/16/01
W97M.Gdd.A File infector 10/16/01
W97M.Newhope.I File infector 10/16/01
W97M.Notme.A File infector 10/16/01
W97M.Rascal.A File infector 10/16/01
W97M.Specmill.A File infector 10/16/01
Backdoor.Destiny File infector 10/15/01
FGIU.2642 File infector 10/15/01
HLLP.6064 File infector 10/15/01
VBS.Lee.B@mm File infector 10/15/01
VBS.Lee@mm File infector 10/15/01
VBS.VWC.A@mm File infector 10/15/01
W32.Nimda.C@mm File infector 10/15/01
W97M.Opey.dam File infector 10/15/01
Zeton.Mirc File infector 10/15/01
Avcs.268 File infector 10/12/01
Avcs.275 File infector 10/12/01
IRC.Glitch.Trojan File infector 10/12/01
Trivial.84(3) File infector 10/12/01
W32.Pinfi File infector 10/12/01
W97M.Automat.AGI File infector 10/12/01
W97M.Grac.A File infector 10/12/01
Bin.Auto.AQU File infector 10/11/01
W32.JavaKiller.Trojan File infector 10/11/01
W95.XORO File infector 10/11/01
W97M.Blowup File infector 10/11/01
W97M.Thelar.A File infector 10/11/01
X97M.Ramboo.A File infector 10/11/01
X97M.Short.A File infector 10/11/01
Backdoor.Slackbot.10 File infector 10/10/01
Backdoor.Slackbot.B File infector 10/10/01
Backdoor.Systsec File infector 10/10/01
VBS.Natiday.A@mm File infector 10/10/01
W32.Desire.Mirc File infector 10/10/01
W32.Hermes.D@mm File infector 10/10/01
W32.Jasmine File infector 10/10/01
W32.Lena File infector 10/10/01
W95.Angriff File infector 10/10/01
W97M.Bottra.D File infector 10/10/01
Name Changes (sorted by Old Virus Name):
Old Virus Name New Virus Name Date changed
-------------- -------------- ------------
AntiPas.1108 to Flex.1108 10/18/01
Backdoor.IRC.SubSeven to Backdoor.IRC.Flood(2) 10/22/01
Bat.Putes to Bat.Stupe 10/01/01
IRC.Glitch.Trojan to Backdoor.IRC.Flood(3) 10/22/01
JS.Radirc.A to JS.Rootlet.A@m 11/01/01
JS.Rootlet.A@m to JS.Radirc.A 10/23/01
O97M.HalfCross.A to O97M.HalfCross.gen 10/04/01
O97M.SweetestThing to O97M.Weete.A 10/16/01
Trojan.BAT.Regbomb.A to BAT.Regbomb.A.Trojan 10/03/01
Trojan.Bat.AntiDN to Bat.AntiDN.Trojan 10/03/01
Trojan.Bat.Autorun to Bat.Autorun.Trojan 10/03/01
Trojan.Bat.BatKiller to Bat.BatKiller.Trojan 10/03/01
Trojan.Bat.DelFiles to Bat.DelFiles.Trojan 10/03/01
Trojan.Bat.DelFolder to Bat.DelFolder.Trojan 10/03/01
Trojan.Bat.Delauto to Bat.Delauto.Trojan 10/03/01
Trojan.Bat.Delini.192 to Bat.Delini.192.Trojan 10/03/01
Trojan.Bat.Delsys to Bat.Delsys.Trojan 10/03/01
Trojan.Bat.Deltree to Bat.Deltree.Trojan 10/03/01
Trojan.Bat.DirMaker to Bat.DirMaker.Trojan 10/03/01
Trojan.Bat.FakeAV.A to Bat.FakeAV.A.Trojan 10/03/01
Trojan.Bat.FakeAV.B to Bat.FakeAV.B.Trojan 10/03/01
Trojan.Bat.HDFill to Bat.HDFill.Trojan 10/03/01
Trojan.Bat.Hardhead to Bat.Hardhead.Trojan 10/03/01
Trojan.Bat.Loop to Bat.Loop.Trojan 10/03/01
Trojan.Bat.NTHack to Bat.NTHack.Trojan 10/03/01
Trojan.Bat.NTHack.vbs to Bat.NTHack.vbs.Trojan 10/03/01
Trojan.Bat.Phat to Bat.Phat.Trojan 10/03/01
Trojan.Bat.QuickFormat to Bat.QuickFormat.Trojan 10/03/01
Trojan.Bat.Rude to Bat.Rude.Trojan 10/04/01
Trojan.Bat.Season.A to Bat.Season.A.Trojan 10/03/01
Trojan.IRC.Gribble to IRC.Gribble.Trojan 10/22/01
Trojan.W97M.Flush.A to W97M.DSFT.Trojan 10/22/01
VBS.Doggie to VBS.Crypter 10/18/01
VBS.Lee.B@mm to VBS.VBSWG.B 10/18/01
VBS.Lee@mm to VBS.VBSWG.D@mm 10/15/01
VBS.Retnal.A@mm to VBS.Loveletter.CW@mm 10/23/01
VBS.VWC.A@mm to VBS.VBSWG.AE@mm 10/16/01
VBS.Vbswg.gen to VBS.VBSWG.gen 10/16/01
VBS.Vbswg.gen(2) to VBS.VBSWG.gen(2) 10/16/01
VBS.Vbswg.gen(3) to VBS.VBSWG.gen(3) 10/16/01
VBS.Vbswg.gen(4) to VBS.VBSWG.gen(4) 10/16/01
W32.Badtrans.13312@mm to W32.Badtrans.gen@mm 10/22/01
W32.HLLW.Giwin to W32.HLLW.Giwin.gen 10/04/01
W32.HLLW.Giwin.gen to W32.Giwin.gen 10/10/01
W32.Jasmine to W32.Seppuku.28160 10/11/01
W32.Vote.C.int to W32.Kiray.A@mm 10/23/01
W95.Dedobe to W95.Dedo 10/23/01
W97M.Contamin.A to W97M.Ramza.B 10/04/01
W97M.Ethan.EL (2) to W97M.Ethan.EL 11/01/01
W97M.Gub to O97M.Gub 10/03/01
W97M.Luar.A to W97M.Trado.A 10/24/01
W97M.Peat to W97M.Titch.J 10/16/01
W97M.Philippines.A to W97M.Liberate.A 10/03/01
W97M.Rusmod.A:Ru to W97M.NotHere.A:Ru 10/22/01
W97M.Tester.A to W97M.Strings.I 10/16/01
W97M.Thus.ES to W97M.Thus.FC 10/01/01
W97M.Trado.A to W97M.Luar.A 11/01/01
W97M.Wrath to W97M.Trolox.A 10/16/01
X97M.Automat.AH to X97M.Divi.I 10/03/01
X97M.Automat.AK to X97M.Divi.K 10/03/01
X97M.DIVI.K to X97M.DIVI.Family 10/03/01
X97M.Killer to X97M.Oblivion.A 10/04/01
X97M.Manalo.D to X97M.Manalo.E 10/04/01
X97M.Sugar.Dropper to X97M.Sugar.E 10/11/01
X97M.Xif.B to X97M.Xif.A 10/16/01
XM.Automat.AG to XM.Manalo.J 10/04/01
XM.Automat.S to XM.Clonar.A 10/03/01
XM.Diablos to XM.Diablo.gen 10/03/01
XM.Manalo.E to XM.Manalo.H 10/04/01
XM.Tabej.B to XM.Tabej.C 10/03/01
XM.Tabej.C to XM.Tabej.B 10/03/01
XM.Yawn to XM.Yawn.Family 10/03/01
Name Changes (sorted by Date changed):
Old Virus Name New Virus Name Date changed
-------------- -------------- ------------
JS.Radirc.A to JS.Rootlet.A@m 11/01/01
W97M.Ethan.EL (2) to W97M.Ethan.EL 11/01/01
W97M.Trado.A to W97M.Luar.A 11/01/01
W97M.Luar.A to W97M.Trado.A 10/24/01
JS.Rootlet.A@m to JS.Radirc.A 10/23/01
VBS.Retnal.A@mm to VBS.Loveletter.CW@mm 10/23/01
W32.Vote.C.int to W32.Kiray.A@mm 10/23/01
W95.Dedobe to W95.Dedo 10/23/01
Backdoor.IRC.SubSeven to Backdoor.IRC.Flood(2) 10/22/01
IRC.Glitch.Trojan to Backdoor.IRC.Flood(3) 10/22/01
Trojan.IRC.Gribble to IRC.Gribble.Trojan 10/22/01
Trojan.W97M.Flush.A to W97M.DSFT.Trojan 10/22/01
W32.Badtrans.13312@mm to W32.Badtrans.gen@mm 10/22/01
W97M.Rusmod.A:Ru to W97M.NotHere.A:Ru 10/22/01
AntiPas.1108 to Flex.1108 10/18/01
VBS.Doggie to VBS.Crypter 10/18/01
VBS.Lee.B@mm to VBS.VBSWG.B 10/18/01
O97M.SweetestThing to O97M.Weete.A 10/16/01
VBS.VWC.A@mm to VBS.VBSWG.AE@mm 10/16/01
VBS.Vbswg.gen to VBS.VBSWG.gen 10/16/01
VBS.Vbswg.gen(2) to VBS.VBSWG.gen(2) 10/16/01
VBS.Vbswg.gen(3) to VBS.VBSWG.gen(3) 10/16/01
VBS.Vbswg.gen(4) to VBS.VBSWG.gen(4) 10/16/01
W97M.Peat to W97M.Titch.J 10/16/01
W97M.Tester.A to W97M.Strings.I 10/16/01
W97M.Wrath to W97M.Trolox.A 10/16/01
X97M.Xif.B to X97M.Xif.A 10/16/01
VBS.Lee@mm to VBS.VBSWG.D@mm 10/15/01
X97M.Sugar.Dropper to X97M.Sugar.E 10/11/01
W32.Jasmine to W32.Seppuku.28160 10/11/01
W32.HLLW.Giwin.gen to W32.Giwin.gen 10/10/01
O97M.HalfCross.A to O97M.HalfCross.gen 10/04/01
Trojan.Bat.Rude to Bat.Rude.Trojan 10/04/01
W32.HLLW.Giwin to W32.HLLW.Giwin.gen 10/04/01
W97M.Contamin.A to W97M.Ramza.B 10/04/01
X97M.Killer to X97M.Oblivion.A 10/04/01
X97M.Manalo.D to X97M.Manalo.E 10/04/01
XM.Automat.AG to XM.Manalo.J 10/04/01
XM.Manalo.E to XM.Manalo.H 10/04/01
Trojan.BAT.Regbomb.A to BAT.Regbomb.A.Trojan 10/03/01
Trojan.Bat.AntiDN to Bat.AntiDN.Trojan 10/03/01
Trojan.Bat.Autorun to Bat.Autorun.Trojan 10/03/01
Trojan.Bat.BatKiller to Bat.BatKiller.Trojan 10/03/01
Trojan.Bat.DelFiles to Bat.DelFiles.Trojan 10/03/01
Trojan.Bat.DelFolder to Bat.DelFolder.Trojan 10/03/01
Trojan.Bat.Delauto to Bat.Delauto.Trojan 10/03/01
Trojan.Bat.Delini.192 to Bat.Delini.192.Trojan 10/03/01
Trojan.Bat.Delsys to Bat.Delsys.Trojan 10/03/01
Trojan.Bat.Deltree to Bat.Deltree.Trojan 10/03/01
Trojan.Bat.DirMaker to Bat.DirMaker.Trojan 10/03/01
Trojan.Bat.FakeAV.A to Bat.FakeAV.A.Trojan 10/03/01
Trojan.Bat.FakeAV.B to Bat.FakeAV.B.Trojan 10/03/01
Trojan.Bat.HDFill to Bat.HDFill.Trojan 10/03/01
Trojan.Bat.Hardhead to Bat.Hardhead.Trojan 10/03/01
Trojan.Bat.Loop to Bat.Loop.Trojan 10/03/01
Trojan.Bat.NTHack to Bat.NTHack.Trojan 10/03/01
Trojan.Bat.NTHack.vbs to Bat.NTHack.vbs.Trojan 10/03/01
Trojan.Bat.Phat to Bat.Phat.Trojan 10/03/01
Trojan.Bat.QuickFormat to Bat.QuickFormat.Trojan 10/03/01
Trojan.Bat.Season.A to Bat.Season.A.Trojan 10/03/01
W97M.Gub to O97M.Gub 10/03/01
W97M.Philippines.A to W97M.Liberate.A 10/03/01
X97M.Automat.AH to X97M.Divi.I 10/03/01
X97M.Automat.AK to X97M.Divi.K 10/03/01
X97M.DIVI.K to X97M.DIVI.Family 10/03/01
XM.Automat.S to XM.Clonar.A 10/03/01
XM.Diablos to XM.Diablo.gen 10/03/01
XM.Tabej.B to XM.Tabej.C 10/03/01
XM.Tabej.C to XM.Tabej.B 10/03/01
XM.Yawn to XM.Yawn.Family 10/03/01
Bat.Putes to Bat.Stupe 10/01/01
W97M.Thus.ES to W97M.Thus.FC 10/01/01
Deletions (sorted by Virus Name):
Virus Name Infection Type Date removed
---------- -------------- ------------
A97M.Amg.A File infector 06/15/01
Backdoor.Systsec File infector 10/12/01
Backdoor.Teste File infector 08/24/01
CLS.Win.Joke.34520(1) File infector 07/17/01
CLS.Win.Joke.34520(2) File infector 07/17/01
Eumel.363.A File infector 08/20/01
Invalid Certificate File infector 05/14/01
MtE.Groove (5) File infector 06/05/01
Neno.Trojan File infector 10/08/01
PS-MPC (1) File infector 10/22/01
PS-MPC (6) File infector 10/23/01
PWS.Cain.dr File infector 09/17/01
Sailor.1108 File infector 08/22/01
Trojan.Billrus.Texto File infector 07/13/01
Trojan.VBS.Autoexec File infector 08/29/01
Unlucky.2008 (2) File infector 06/11/01
Unlucky.2008 (3) File infector 06/11/01
VBS.Zeta.A@mm File infector 10/16/01
W32.Antiqfx.B.worm File infector 08/01/01
W32.Antiqfx.C.worm File infector 08/01/01
W32.Bedtime.2304 File infector 07/02/01
W32.Vote.B@mm File infector 09/27/01
W95.Mul.2012 File infector 05/31/01
W95.Smoker.Worm@mm File infector 07/12/01
W97M.Bottra.D File infector 10/15/01
WM.Kam File infector 08/20/01
X97M.Activated.A File infector 10/03/01
X97M.DIVI.J File infector 10/03/01
X97M.Divi.G File infector 10/03/01
X97M.Divi.M File infector 10/03/01
Yosha.761 File infector 08/22/01
Deletions (sorted by Date removed):
Virus Name Infection Type Date removed
---------- -------------- ------------
PS-MPC (6) File infector 10/23/01
PS-MPC (1) File infector 10/22/01
VBS.Zeta.A@mm File infector 10/16/01
W97M.Bottra.D File infector 10/15/01
Backdoor.Systsec File infector 10/12/01
Neno.Trojan File infector 10/08/01
X97M.Activated.A File infector 10/03/01
X97M.DIVI.J File infector 10/03/01
X97M.Divi.G File infector 10/03/01
X97M.Divi.M File infector 10/03/01
W32.Vote.B@mm File infector 09/27/01
PWS.Cain.dr File infector 09/17/01
Trojan.VBS.Autoexec File infector 08/29/01
Backdoor.Teste File infector 08/24/01
Sailor.1108 File infector 08/22/01
Yosha.761 File infector 08/22/01
Eumel.363.A File infector 08/20/01
WM.Kam File infector 08/20/01
W32.Antiqfx.B.worm File infector 08/01/01
W32.Antiqfx.C.worm File infector 08/01/01
CLS.Win.Joke.34520(1) File infector 07/17/01
CLS.Win.Joke.34520(2) File infector 07/17/01
Trojan.Billrus.Texto File infector 07/13/01
W95.Smoker.Worm@mm File infector 07/12/01
W32.Bedtime.2304 File infector 07/02/01
A97M.Amg.A File infector 06/15/01
Unlucky.2008 (2) File infector 06/11/01
Unlucky.2008 (3) File infector 06/11/01
MtE.Groove (5) File infector 06/05/01
W95.Mul.2012 File infector 05/31/01
Invalid Certificate File infector 05/14/01
**********************************************************************
** Enabling Scanning Features **
**********************************************************************
Several scanning features can be enabled through the use of an INF
configuration file. For NAV for Windows 95/NT version 4.x and later,
or NAV for OS/2, this configuration file should be called NAVEX15.INF
and should be placed in the directory where NAV is installed (i.e.,
C:\Program Files\Norton AntiVirus). For NAV for Netware version 4.x,
the file should be called NAVEX15.INF and should be placed in the
directory where NAV 4.x is installed (i.e., sys:system\navnlm). For
NAV for Windows 95/NT version 2.0, NAV 4.x for Windows 3.1/DOS,
NAVIEG 1.x, or NAVFW 1.x, the file should be named NAVEX.INF and
should be placed in the directory where NAV is installed (i.e., C:\NAV).
If this configuration file does not exist, create one in the appropriate
directory if you want to change the default settings.
To enable a scanning feature for a particular component, one or more
entries need to be added to the configuration file under the correct
section. For each platform there is a corresponding section that is used
in the INF file. Below is a table of section names and platforms.
Section Name Platform
------------ --------
NAVW32 Windows 95/98/NT
NAVAP Windows 95/98/NT Auto-Protect
NAVDX DOS
NAVNLM Netware
NAVWIN Windows 3.1
NAVOS2 OS/2
NAVAIX AIX
NAVSOL Solaris
Entries are case insensitive. Below is a description of possible
entries.
1. Files can be excluded from scans by the NAVEX engine. To exclude a
specific file from the NAVEX engine scan, add an entry with the full
path and file name. This is case insensitive. No wildcards are allowed.
To exclude multiple files, add a separate entry for each file. To exclude
a file, add an entry like the one below where <PATH> is the full path
and file name.
ExcludeFile = <PATH>
2. Files within a directory can be excluded from scans by the NAVEX engine.
To exclude all files within a directory, add an entry with the full
directory path. This is case insensitive. No wildcards are allowed. This
does not exclude files located in subdirectories of the specified
directory. To exclude multiple directories, add a separate entry for each
directory. To exclude a directory, add an entry like the one below where
<DIRECTORY> is the full path.
ExcludeDirectory = <DIRECTORY>
The following example of an INF configuration file excludes two files,
NOSCAN.EXE and BIGFILE.DOC, from NAVEX scans for the Windows 95/98/NT
scanner. It excludes the D:\PRIVATE directory from Windows 95/98/NT
Auto-Protect.
[NAVW32]
ExcludeFile = C:\PROGRAM FILES\NOSCAN.EXE
ExcludeFile = C:\TEMP\BIGFILE.DOC
[NAVAP]
ExcludeDirectory = D:\PRIVATE
**********************************************************************
** Additional Information **
**********************************************************************
Additional information regarding this virus definitions update can be
found in UPDATE.TXT and TECHNOTE.TXT.