CUPERTINO, Calif. - May 26, 2000 - Symantec Corp. (NASDAQ: SYMC) today announced that researchers at the Symantec AntiVirus Research Center (SARC) have developed a cure for W97M.Melissa.BG (alias W97.Resume.A) -- an extremely fast-spreading macro computer worm that uses Microsoft Outlook to e-mail itself as an attachment.
Symantec’s Norton AntiVirus customers can download the current virus definition set, which includes a cure for the W97M.Melissa.BG virus through Symantec’s LiveUpdate feature or from the Symantec Web site at www.symantec.com/avcenter/download.html. Additionally, SARC recommends administrators filter for the attachment name and subject line immediately. To submit a suspicious virus file to Symantec for analysis, customers can use the Scan and Deliver feature in Norton AntiVirus or visit Symantec’s Web site at www.symantec.com for detailed instructions.
Characteristics of Infection/ Payload
W97M.Melissa.BG is an Internet worm that uses Microsoft Outlook to spread itself as an attachment with the subject line "Resume -- Janet Simons" along with an attachment called "RESUME1.DOC."
When a user opens an infected document, the virus will attempt to e-mail a copy of the document to everyone in the user's Microsoft Outlook address book. The virus also copies itself to "C:\Data\Normal.dot" and to "C:\WINDOWS\Start Menu\Programs\StartUp\Explorer.doc."
Once the user closes the document, the virus attempts to delete the following files, rendering the system inoperable: C:\*.*
All files in the root directory in drives A through Z.
The body of the e-mail sent is as follows:
To: Director of Sales/Marketing,
Attached is my resume with a list of references contained within. Please feel free to call or email me if you have any further questions regarding my experience. I am looking forward to hearing from you.
Symantec AntiVirus Research Center
SARC is one of the industry’s largest dedicated team of virus experts. With offices located in the United States, Japan, Australia, and the Netherlands, the sun never sets on SARC. The center’s mission is to provide swift, global responses to computer virus threats, proactively research and develop technologies that eliminate such threats, and educate the public on safe computing practices. As new computer viruses appear, SARC develops identification and detection for these viruses, and provides either a repair or delete operation, thus keeping users protected against the latest virus threats.
Symantec is the world leader in providing solutions to help individuals and enterprises assure the security, availability, and integrity of their information. Headquartered in Cupertino, Calif., Symantec has operations in more than 40 countries. More information is available at www.symantec.com.
NOTE TO EDITORS: : If you would like additional information on Symantec Corporation and its products, please view the Symantec Press Center at http://www.symantec.com/PressCenter/ on Symantec's Web site. All prices noted are in US dollars and are valid only in the United States.
Symantec, the Symantec logo, VERITAS, and the VERITAS logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the United States and certain other countries. Additional company and product names may be trademarks or registered trademarks of the individual companies and are respectfully acknowledged.
FORWARD LOOKING STATEMENT: This press release contains forward-looking statements. There are certain important factors that could cause Symantec's future development efforts to differ materially from those anticipated by some of the statements made above. Among these are the anticipation of the growth of certain market segments, the positioning of Symantec's products in those segments, the competitive environment in the software industry, new security threats, dependence on other products, changes to operating systems and product strategy by vendors of operating systems, and the importance of new Symantec products. Additional information concerning those and other factors is contained in the "Risk Factors" section of the company's annual report on Form 10-K for the fiscal year ended April 2, 1999.