ABOUT SYMANTEC

Press Release

LinkedIn Facebook Twitter RSS

Symantec Introduces New Trojan Horse Detection Technology; Protects Users Against Latest Password-Stealing Threat

Norton AntiVirus Users Can Take Advantage of LiveUpdate Technology to Update Software

Cupertino, Calif. --February 10, 1998-- Symantec Corporation (NASDAQ: SYMC), the world's leading supplier of anti-virus technology, announced today that the Symantec AntiVirus Research Center (SARC) has developed a new Trojan Horse detection engine designed to address the growing threat of this type of malicious code. Trojan Horses are programs that may seem legitimate, but actually are designed to carry out malicious activities when activated, such as stealing passwords or destroying data. Once again, Symantec is able to update Norton AntiVirus users with this new engine easily and at no cost to the customer by using Symantec's exclusive LiveUpdate technology.

Users of all Norton AntiVirus 4.0 products, including server and desktop solutions, need only click the LiveUpdate button in the software or download the update from the SARC Web site (www.symantec.com/avcenter) to be protected immediately. Those users who have scheduled LiveUpdate to run on a regular basis will receive the solution with the next automatic update. As with all virus definition and program updates from Symantec, this solution is free to all Norton AntiVirus users and is fully tested.

"Only Norton AntiVirus users can receive the latest technology to protect them against emerging threats without having to install a new version of the software," said Enrique Salem, vice president of Symantec's Security and Assistance Business Unit. "Our unique, patent-pending LiveUpdate technology allows us to provide our customers with leading edge technology at no extra cost or hassle."

Approximately 90 percent of Trojan Horses found in circulation today are from online services. Significant numbers of Trojan Horses are designed to steal a user's login ID and password and then e-mail it to someone else who then makes use of the account at the user's expense. Other Trojan Horses may display obscene messages on the user's screen or delete the contents of their hard drive.

Users typically get Trojan Horses by downloading a program that seems benign or promises the user something like free online time. Once it is downloaded and executed, the malicious code begins to work. The difference between Trojan Horses and traditional computer viruses is that Trojan Horses do not replicate themselves and spread on their own. They can only be transmitted intentionally via e-mail or disk or downloaded directly onto a PC. This means that, unlike a traditional computer virus, users are typically only affected once by a specific Trojan Horse.

Symantec's Trojan Horse detection engine operates on a type of signature-based scanning, pulling from a database of hundreds of previously identified Trojan Horses. It compares a variety of carefully calculated identities for each known Trojan Horse to potential malicious code on the user's computer and deletes any offenders that match.

In addition being protected by Norton AntiVirus, users should be wary of programs that make promises too good to be true in order to avoid being attacked by a Trojan Horse. Also, users should not install programs sent unsolicited through e-mail or sent by someone they do not recognize.

LiveUpdate Provides Constant Protection
Customers need an easy, automatic way to keep their anti-virus protection current. LiveUpdate simplifies the update process and provides end-users with a revolutionary way to protect against both today's virus threats and those that will appear in the future - a critical requirement when, on average, 10 to 15 new viruses are discovered every day. LiveUpdate automatically detects an Internet connection or modem and connects to a Symantec server, then downloads and installs the latest virus definitions. Norton AntiVirus users can schedule LiveUpdate to run at regular intervals or can trigger it manually by pressing the LiveUpdate button.

In addition to receiving Symantec's free monthly virus definition updates, LiveUpdate may also be used to install software patches and obtain product information. Norton AntiVirus features a modular engine called NAVEX that allows Symantec to ship fundamental changes and updates to the engine technology. LiveUpdate delivers this engine, but NAVEX is what keeps these changes small enough to download over the Internet.

Symantec's Trojan Horse detection engine is only one of several significant program updates Norton AntiVirus users have received since the latest version was introduced in September. Other technologies transmitted to Norton AntiVirus users via LiveUpdate and NAVEX include: a detection and repair engine for the new formula infector Excel virus, Bloodhound Boot technology and Bloodhound Macro technology. Symantec has also used LiveUpdate and NAVEX to update previous versions of Norton AntiVirus with Word 95 and Word 97 support, Excel 95 and Excel 97 support, Windows 32-bit support and support for Polymorphic viruses.

Symantec AntiVirus Research Center
Symantec's Norton AntiVirus product line is backed by the worldwide support of the Symantec AntiVirus Research Center. SARC comprises a dedicated team of virus experts who provide swift responses to local and global computer threats, actively researching and developing technologies to eliminate such threats, and educating the public on safe computing practices.

As new computer viruses appear, SARC develops identification and detection of these viruses, and provides either a repair or delete operation, thus keeping users protected against the latest virus threats. These virus definitions updates are available to users of Norton AntiVirus, and are easily obtained by using the LiveUpdate or Intelligent Updater. LiveUpdate provides one-button access to the latest virus definition updates, free of charge (other than normal phone and Internet charges) to registered users. Symantec is the only anti-virus company that provides its users virus definitions that are free of charge, easy to obtain and install, and updated monthly by SARC.

About Symantec
Symantec Corporation helps make users productive and keep their computers safe and reliable anywhere and anytime. Symantec offers a broad range of solutions and is acclaimed as a leader in both customer satisfaction and product brand recognition. The company is focused on addressing customer needs in three main application areas: the Norton product line of anti-virus and PC-assistance products; the pcANYWHERE, WinFax and ACT! product lines that cater to remote user productivity; and the Cafe product lines in Internet development tools.

Founded in 1982, the company's global operations span North America, Europe, Japan and several fast growing markets throughout Asia Pacific and Latin America. Traded on Nasdaq under the symbol SYMC, Symantec Corporation is based in Cupertino, California and employs more than 2,000 people. Information on the company and its products can be obtained by calling (800) 441-7234 toll free, (541) 334-6054 or accessed on the World Wide Web at http://www.symantec.com.

NOTE TO EDITORS: If you would like additional information on Symantec Corporation and its products, please view the Symantec Press Center at http://www.symantec.com/PressCenter/ on Symantec's web site.

Brands and products referenced herein are the trademarks or registered trademarks of their respective holders.

@Symantec