********************************************************************** ** ** ** What's New in the NAV Virus Definitions Files WHATSNEW.TXT ** ** ** ** Symantec AntiVirus Research Center (SARC) July 29, 1998 ** ** ** ********************************************************************** This document contains the following topics: * Update Overview * Virus Alerts * Changes Incorporated Into This Update * Additional Information ********************************************************************** ** Virus Alerts ** ********************************************************************** The ten most commonly reported viruses, worldwide: 1 Form.A 2 WM.Concept.A 3 AntiEXE.A 4 One Half 5 Stoned.Empire.Monkey.B 6 Junkie 7 AntiCMOS.A 8 Parity Boot.B 9 Natas.4744 10 NYB Be on the alert for the following viruses in the following regions: AntiCMOS.A USA, Europe AntiEXE USA, Europe, India, Japan Anxiety.1536 USA and Europe DuBug.3999 Europe Junkie Europe, Asia and Australia NYB North America One_Half Europe, India and Mexico Parity_Boot Central and Northern Europe Sat_Bug.Natas Central and South America WM.Concept Worldwide WM.Wazzu Worldwide ********************************************************************** ** Changes Incorporated Into This Virus Definitions Update ** ********************************************************************** New virus definitions: Virus Name Infection Type Week added ---------- -------------- ---------- Alar.mp.4270 File and Boot infector 6/24/98 Alpha.1555 File infector 6/17/98 alpha.447 File infector 6/17/98 Anarchy.3153 File infector 6/17/98 Animals.2400.a File infector 7/15/98 Animals.2400.b File infector 6/17/98 AOL Trojan 2351 File infector 7/22/98 AOL.Trojan File infector 6/29/98 Apparition.5959 File infector 7/15/98 Arara.1800 File infector 6/17/98 ArjDrop.402.A File infector 6/17/98 Arya.4616.a (b) File and Boot infector 6/17/98 AusIH.823 File infector 6/17/98 Aust.1014 File infector 6/17/98 Aust.1014 (2) File infector 6/17/98 AutoStart.9805-b PowerPC worm 6/24/98 AutoStart.9805-c PowerPC worm 6/24/98 Babol.3072 File and Boot infector 6/17/98 Bandersnatch.3934 File infector 6/17/98 BG.3084 File infector 6/17/98 BNut.mp.cav.448 File and Boot infector 6/24/98 BNut.mp.cav.448 (b) File and Boot infector 6/24/98 Bottle Trojan File infector 6/29/98 BW.372 Gen(1) File infector 6/17/98 Cabanas.3127 File infector 6/17/98 Cell.1629 File infector 6/17/98 Cezar.4567 File infector 6/17/98 Clonewar.923 gen(1) File infector 6/24/98 Config.450 Boot Boot infector 6/17/98 Config.450.A File infector 6/17/98 Config.450.B File infector 6/17/98 Cornucopia.C File infector 6/24/98 Cornucopia.C (2) File infector 6/24/98 Cornucopia.E File infector 6/24/98 Cornucopia.E (2) File infector 6/24/98 cou.2260 (b) File and Boot infector 6/17/98 CROWL Trojan File infector 7/29/98 Cruncher.4000 File infector 6/24/98 Cruncher.4000(x) File infector 6/24/98 Crusade.3000 File infector 6/17/98 CT.1216 File infector 6/17/98 Darkman.6580 File infector 6/17/98 DIR-II (1) File infector 6/17/98 DIR-II.G File infector 6/17/98 Dre.ow.192 File infector 6/29/98 Dream.2012 File infector 6/17/98 Druid.585 File infector 6/17/98 Dutch Tiny.87 File infector 6/17/98 Eat Screen Trojan File infector 6/29/98 Empire.Monkey.D (b) Boot infector 6/17/98 Evul.ow.109 File infector 6/29/98 Exe.cav.360 File infector 6/17/98 ExeKilla.ow.48117 File infector 7/15/98 ExeKilla.ow.48117 (2) File infector 7/15/98 expld.250 File infector 6/17/98 FitW.a (b) File and Boot infector 6/17/98 Game Joke Program File infector 7/22/98 Gena (b) Boot infector 6/17/98 Generic Joke Program File infector 7/29/98 Ghost of Zealand File infector 7/29/98 Ghost.5000b File infector 6/17/98 HADI.6153b File infector 6/24/98 Hal (b) Boot infector 7/08/98 Harm.3513 File infector 6/17/98 Harrier.mp (b) File and Boot infector 6/24/98 HLL.5120 File infector 6/17/98 HLL.cmp.5728 File infector 6/29/98 HLL.cmp.5728(2) File infector 6/29/98 HLL.cmp.7376.b File infector 6/17/98 HLL.cmp.7376.b(2) File infector 6/17/98 HLL.cmp.7952 File infector 6/17/98 HLL.cmp.7952(2) File infector 6/17/98 HLL.cmp.8086 File infector 6/17/98 HLL.cmp.8086 (2) File infector 6/17/98 HLL.cmp.8086 (3) File infector 6/17/98 HLL.ow.2428 File infector 6/24/98 HLL.ow.2428(2) File infector 6/24/98 HLL.ow.2428.unp File infector 6/24/98 HLL.ow.2428.unp (2) File infector 6/24/98 HLL.ow.2827 File infector 7/15/98 HLL.ow.2827 (2) File infector 7/15/98 hll.ow.3038 File infector 6/17/98 hll.ow.3038 (2) File infector 6/17/98 HLL.ow.3968 File infector 7/15/98 HLL.ow.3968 (2) File infector 7/15/98 HLL.ow.7227a File infector 6/29/98 HLL.ow.7227a(2) File infector 6/29/98 HLL.ow.7227b (1) File infector 6/17/98 HLL.ow.7227b (2) File infector 6/17/98 HLL.sub.8816 File infector 6/29/98 HLL.sub.8816(2) File infector 6/29/98 HLLC.12064 (1) File infector 6/29/98 HLLC.12064 (2) File infector 6/29/98 HLLC.5616 File infector 6/29/98 HLLC.5616(2) File infector 6/29/98 HLLC.8304 File infector 6/17/98 HLLP.5712 (1) File infector 6/17/98 HLLP.5712(2) File infector 6/17/98 HLLP.7000 File infector 6/17/98 HLLP.7104 File infector 6/29/98 HLLP.7104(2) File infector 6/29/98 HLLP.9840 File infector 6/17/98 HLLP.9840(2) File infector 6/17/98 HLLP.Cookie.7392 File infector 6/17/98 HLLP.Cookie.7392 (2) File infector 6/17/98 HLLP.Krile.4768 File infector 6/24/98 HLLP.Krile.4768(2) File infector 6/24/98 HLLT.4395 (1) File infector 6/29/98 HLLT.4395 (2) File infector 6/29/98 HLLT.4629 File infector 6/29/98 HLLT.4629(2) File infector 6/29/98 HLLT.4709a File infector 6/29/98 HLLT.4709a(2) File infector 6/29/98 HLLT.4709b File infector 6/29/98 HLLT.4709b(2) File infector 6/29/98 HLLT.4745d File infector 6/17/98 HLLT.4745d (2) File infector 6/17/98 HLLT.4885 File infector 6/29/98 HLLT.4885(2) File infector 6/29/98 HLLT.4949a File infector 6/29/98 HLLT.4949a(2) File infector 6/29/98 HLLT.4949b File infector 6/29/98 HLLT.4949b(2) File infector 6/29/98 HLLT.5046 File infector 6/17/98 HLLT.5046(2) File infector 6/17/98 HLLT.5400 File infector 6/29/98 HLLT.5400(2) File infector 6/29/98 HLLT.5664 File infector 6/17/98 HLLT.5664 (2) File infector 6/17/98 HLLT.7712 File infector 6/29/98 HLLT.7712(2) File infector 6/29/98 HLLT.8288 File infector 6/17/98 HLLT.8288b File infector 6/29/98 HLLT.8288b(2) File infector 6/29/98 HLLT.9223 File infector 6/17/98 HLLT.9223(2) File infector 6/17/98 HLLT.Krile.4569 File infector 6/17/98 HLLT.Krile.4569(2) File infector 6/17/98 HLLT.Lip.4784 File infector 6/17/98 HLLT.Lip.4784 (2) File infector 6/17/98 HLLT.Lip.4880 File infector 6/17/98 HLLT.Lip.4880 (2) File infector 6/17/98 HLLT.Nazi.6528c (1) File infector 6/29/98 HLLT.Nazi.6528c (2) File infector 6/29/98 HLLT.Tara.4884 File infector 6/17/98 HLLT.Tara.4884(2) File infector 6/17/98 HMA Boot Dropper File infector 6/17/98 HMA Boot.A Boot infector 6/17/98 HMA Boot.B Boot infector 6/17/98 HMYR.1800 File infector 6/17/98 Homer.A File infector 6/17/98 Hong Kong.mp (1) File and Boot infector 6/17/98 Hong Kong.mp (2) File and Boot infector 6/17/98 Horse.1776 (1) File infector 6/17/98 House.397 File infector 6/17/98 Iblis.252 File infector 6/29/98 Implant.6128.b Boot infector 6/24/98 Implant.6128.b (x) Boot infector 6/24/98 Implant.mp (b) File and Boot infector 6/24/98 Insert.292 File infector 6/17/98 IRC Trojan File infector 6/29/98 Island.3551 File and Boot infector 6/24/98 IVIR.127 File infector 6/17/98 IVP.April.1646 File infector 6/17/98 Jacky.1107 File infector 6/17/98 Java.CrashComm File infector 7/29/98 Java.DiskHog File infector 7/29/98 Java.PickPocket (demo) File infector 7/29/98 JDC.7616 File infector 6/17/98 JDC.7616b File infector 6/17/98 JDC.7616b (2) File infector 6/17/98 JDC.mp.6891 File infector 6/17/98 Jeru.Suriv2.01 Gen(1) File infector 6/17/98 Jerusalem.2660 (x) File infector 6/17/98 July14.512 File infector 6/17/98 KOV.1798 (1) File infector 6/29/98 Kuhkan.1313 File infector 6/17/98 Kust.2071 (1) File infector 6/17/98 Kust.2071 (2) File infector 6/17/98 Kust.2071 (3) File infector 6/17/98 Kust.2071 (4) File infector 6/17/98 Kust.2071 (5) File infector 6/17/98 Lance.342 File infector 6/17/98 Later.959 File infector 6/17/98 LeftShift (b) Boot infector 6/17/98 Light.1466 File infector 6/17/98 Lightning.4251 File infector 6/17/98 Lithium.4113 File and Boot infector 6/24/98 Login Companion.667 File infector 6/17/98 LoveChild dr.b Boot infector 6/17/98 Lunch.783 (4) File infector 6/29/98 Lunch.783 (5) File infector 6/29/98 Lust.120 File infector 6/29/98 Lust.121 File infector 6/29/98 Lust.258 File infector 6/29/98 Mad.1663 File infector 6/17/98 Mail (b) Boot infector 6/17/98 Malatinec.3737 File infector 6/29/98 Malatinec.3737(x) File infector 6/29/98 Markus.mp.6001 File and Boot infector 6/24/98 Massacre.778 File infector 6/17/98 Matthew.2667 (b) Boot infector 6/17/98 Matthew.3044 (b) Boot infector 6/17/98 Matura.1626 (1) File infector 6/17/98 Matura.1626(x) File infector 6/17/98 Maus.1888 (s) File infector 6/17/98 Maverick.1536 (7) File infector 7/15/98 ME4.1223 File infector 6/29/98 Memorial File infector 6/17/98 Mimicry.64511 File infector 6/17/98 Min.94 File infector 6/17/98 MPCa.430.dr File infector 6/17/98 mpei.4772 File infector 6/17/98 mpei.4772(x) File infector 6/24/98 Mrod.5154 File infector 6/17/98 Mrod.5154 (2) File infector 6/17/98 Mrod.5154 (3) File infector 6/17/98 Mrod.5154 (4) File infector 6/17/98 MSU.2000 File infector 6/17/98 Muhamor.4608 File infector 6/17/98 MV.ow.383 File infector 6/17/98 Nady.934 File infector 6/29/98 Nilz.1000 File infector 6/17/98 Noi.4853 File infector 6/17/98 NoLimit.439 (1) File infector 6/17/98 NoLimit.439 (2) File infector 6/17/98 NoLimit.439 (3) File infector 6/17/98 Nostar.3584.I File infector 6/17/98 Nostar.5761 File infector 6/17/98 Npox.1722 Gen(1) File infector 6/17/98 Nucleii.ow.200 File infector 6/29/98 Nut.88 File infector 6/29/98 Nutcracker.mp.3472 (b) File and Boot infector 6/24/98 Nutcracker.mp.4540 (b) File and Boot infector 6/24/98 Nutcracker.mp.5375 (b) File and Boot infector 6/24/98 Nutcracker.mp.5440 (b) File and Boot infector 6/24/98 Nutcracker.mp.6100 (b) File and Boot infector 6/24/98 Oath.264 File infector 6/17/98 OCX.DirectoryRename File infector 7/29/98 OCX.Exploder File infector 7/29/98 OCX.FinalX (demo) File infector 7/29/98 OCX.Runner (demo) File infector 7/29/98 OCX.SendFile File infector 7/29/98 Odyssey File infector 7/22/98 Offspring.cmp.1535 File infector 6/17/98 Olivia.3378 File infector 6/24/98 Olivia.3378 (2) File infector 6/24/98 Olivia.3378 (x) File infector 6/24/98 Olivia.3378 (x2) File infector 6/24/98 Paraguay.1650 File infector 6/29/98 Paraguay.1726 File infector 6/17/98 Paraguay.2867 File infector 7/15/98 Pastika.2049 File infector 6/17/98 PCBB.1800b File infector 6/17/98 PirateHat.2360 File infector 6/17/98 Pombero.GR File infector 7/15/98 Pres.mp.1504 File and Boot infector 6/17/98 Pusher.739 File infector 6/17/98 QBootDr37 Boot infector 6/17/98 QBootDr6 Boot infector 6/17/98 Ringworm.ow.G File infector 6/17/98 RMS2.1472 File infector 6/17/98 Rook.4517d File infector 6/17/98 Russel.3072 File infector 6/24/98 SayNay.Gr File infector 6/17/98 Scream Fist.652 File infector 6/29/98 SEEG.1422 File infector 6/17/98 SEEG.1698 File infector 6/17/98 SEEG.1707 File infector 6/17/98 SEEG.1870 File infector 6/17/98 SemiSoft.60416 File infector 6/17/98 Sentinel.4638 File infector 6/17/98 Sepultura.242.a File infector 6/29/98 Serg.424 File infector 6/17/98 Serrelinda.337 File infector 6/17/98 Skopal.1599 File infector 6/17/98 SMEG.Triv File infector 6/29/98 Sot.cav.352 File infector 6/29/98 Spartak.cmp.2000 File infector 6/24/98 Spartak.cmp.2000 (2) File infector 6/24/98 Spartak.cmp.2000 (3) File infector 6/24/98 Spartak.cmp.2000 (4) File infector 6/24/98 Spooky.ow.440 File infector 6/29/98 Star.1057 File infector 6/17/98 Supervisor.2906 File infector 6/17/98 T-1300.ow.157 (x1) File infector 6/17/98 T-1300.ow.157 (x2) File infector 6/17/98 Tai-Pan Gen(1) File infector 6/17/98 Tangle.97 File infector 6/17/98 Tarazo.985 File infector 6/17/98 Tchechen.mp.1988 File infector 6/17/98 Tchechen.mp.3404 (b) File and Boot infector 6/17/98 Tchechen.mp.3420 File and Boot infector 6/17/98 Tchechen.mp.3430 File and Boot infector 6/17/98 Tchechen.mp.3436 File and Boot infector 6/17/98 Tchechen.mp.3470 File and Boot infector 6/17/98 Tchechen.mp.3564 File infector 6/17/98 Tedy.4350 (3) File and Boot infector 6/17/98 Tedy.4350 (4) File and Boot infector 6/17/98 Tedy.4350 (5) File and Boot infector 6/17/98 Tedy.4350 (6) File and Boot infector 6/17/98 Tedy.4350 (7) File and Boot infector 6/17/98 Tedy.4350 (b) File and Boot infector 6/17/98 TPE.Demo.1760 File infector 6/17/98 TPE.Proto.1733 File infector 6/17/98 Triamber.2724 (1) File infector 6/17/98 Tricks.186 File infector 6/17/98 Trident.241 (2) File infector 6/29/98 Trident.T.914 File infector 6/24/98 Trident.T.914 (2) File infector 6/24/98 Trojan Horse File infector 6/17/98 Tupac.1308 File infector 6/17/98 Uestc.888 (2) File infector 6/17/98 Ukraine.3404 File infector 6/24/98 Ukraine.3404 (2) File infector 6/24/98 Ukraine.3404 (3) File infector 6/24/98 UltraCool.Joke File infector 7/08/98 USTC.mp File and Boot infector 6/24/98 USTC.mp.7680 File and Boot infector 6/24/98 v2px.1256b File infector 6/17/98 v2px.974 File infector 6/17/98 Vanitas.3712 File infector 6/17/98 VCL.1000 File infector 6/17/98 VCLc.cmp.432a File infector 6/17/98 Verwolf.3202.b File infector 6/17/98 VerWolf.3220.B File infector 6/17/98 VG.PSI.193 File infector 6/17/98 VG.Trivial.B.92 File infector 6/17/98 VGA trojan File infector 6/24/98 Vienna.909 Gen(1) File infector 6/17/98 Vir.1441 File infector 6/17/98 Virogen.Offspring.BIZ File infector 6/29/98 Virogen.Pinworm_1.6.B File infector 6/29/98 Virus.Dropper File infector 6/24/98 VME.Demo.2862 File and Boot infector 6/17/98 Voices.1900 File infector 6/17/98 W95.CIH.1075 File infector 7/08/98 W97M.Appder.T File infector 6/24/98 W97M.AutoD.A File infector 6/24/98 W97M.Cartman.B File infector 6/17/98 W97M.Change.A File infector 6/24/98 W97M.Cross.A File infector 6/24/98 W97M.Cross.B File infector 6/24/98 W97M.Cross.C File infector 6/24/98 W97M.Cross.D File infector 6/24/98 W97M.East.A File infector 6/24/98 W97M.Edds.B File infector 6/24/98 W97M.Eraser.T File infector 6/24/98 W97M.Evelyn.A File infector 6/24/98 W97M.Groov.A File infector 6/17/98 W97M.Havix.A File infector 6/24/98 W97M.Hazard.A File infector 6/24/98 W97M.Honte.A File infector 6/24/98 W97M.India.A File infector 6/24/98 W97M.Kid.A File infector 6/24/98 W97M.MDP.A File infector 6/24/98 W97M.Minimorph.A File infector 6/24/98 W97M.Multi.F File infector 6/24/98 W97M.Multi.G File infector 6/24/98 W97M.Nottice.D File infector 6/24/98 W97M.Nottice.E File infector 6/24/98 W97M.Satan.A File infector 6/24/98 W97M.Sprhide.A File infector 6/24/98 W97M.SWSD.A File infector 6/24/98 W97M.Wazzu.DN File infector 6/24/98 W97M.ZMK.A File infector 6/24/98 W97M.ZMK.B File infector 6/24/98 W97M.ZMK.C File infector 6/24/98 W97M.ZMK.E File infector 6/24/98 W97M.ZMK.F File infector 6/24/98 W97M.ZMK.G File infector 6/24/98 W97M.ZMK.H File infector 6/24/98 W97M.ZMK.J File infector 7/08/98 Wanker.ow.86 File infector 6/29/98 Whimsy.256 File infector 6/17/98 WinSurf (Gen1) File infector 6/17/98 WinTiny.385 File infector 6/17/98 WM.AntiCon (Mangled) File infector 6/17/98 WM.Blashyrkh.A File infector 6/29/98 WM.Czech.B File infector 6/17/98 WM.Divina.R File infector 6/29/98 WM.DMV.K File infector 6/29/98 WM.DZT.K File infector 6/29/98 WM.Echo.A File infector 6/24/98 WM.MDMA.BG File infector 7/22/98 WM.Mentes.B File infector 7/22/98 WM.PolyPoster.A File infector 7/08/98 WM.Razer.C File infector 6/17/98 WM.Temple.S File infector 6/29/98 XM.Extras.E File infector 7/15/98 XM.Extras.E File infector 7/22/98 XM.Laroux.DK File infector 6/24/98 XM.Laroux.DL File infector 6/29/98 XM.Laroux.DP File infector 7/08/98 XM.Laroux.DQ File infector 7/22/98 XM.Laroux.DR File infector 7/22/98 XM.Tabej.A File infector 6/29/98 XM.Tabej.B File infector 7/15/98 Yobo.4918 File infector 6/17/98 Yurn.1179 File infector 6/17/98 Zany.103 File infector 6/17/98 Zany.92 File infector 6/17/98 Zhangfan.1535.c File infector 6/17/98 Zhug.5976c File infector 6/24/98 Zhug.cmp.2874 File infector 6/24/98 ZogZog.915 File infector 6/17/98 Zombie.16384 File infector 6/24/98 Zombie.16384 (2) File infector 6/24/98 Zombie.16384 (3) File infector 6/24/98 Zombie.4592 File infector 6/17/98 Zombie.7312 File infector 6/17/98 Zombie.7312 (2) File infector 6/17/98 Zorm.GR File infector 6/29/98 Name Changes: Old Virus Name New Virus Name Date changed -------------- -------------- ---------- Nilz.1000 to Nilz.1000 (1) 6/17/98 097M.Teocatl.A to O97M.Teocatl.A 7/08/98 XM.Laroux.DL to XM.Laroux.DO 7/08/98 Deletions: Virus Name Infection Type Date removed ---------- -------------- ------------ Cruncher.4000 File infector 6/29/98 Cruncher.4000(x) File infector 6/29/98 HLL.cmp.8086 File infector 6/24/98 HLL.cmp.8086 (2) File infector 6/24/98 HLL.cmp.8086 (3) File infector 6/24/98 HLL.ow.7227a File infector 7/08/98 HLL.ow.7227a(2) File infector 7/08/98 Scream Fist.652 File infector 6/24/98 Triamber.2724 (1) File infector 6/24/98 W95.LoRez (dll) File infector 7/08/98 ********************************************************************** ** Additional Information ** ********************************************************************** SARC has equipped Norton AntiVirus with a new feature called "Infestation Mode." If a large number of new or unknown viruses is found on the system during a scan, Norton AntiVirus will automatically enable its highest level of detection. This gives users the most comprehensive protection in cases where a viral infestation may have been detected. If you would like to disable this feature, you can do so by following these instructions: 1. Create a text File called NAVEX15.INF in your Norton AntiVirus directory,e.g., C:\Program Files\Norton AntiVirus. If this file already exist go to step two. 2. Place the following lines in this File on the left-hand margin: [NAVW32] infestmode=0 [NAVDX] infestmode=0 3. Save the File. Additional information regarding this virus definitions update can be found in UPDATE.TXT and TECHNOTE.TXT.