Symantec logo
United States
Antivirus Research Center


Advanced Search

Information for You

Shop Symantec

Products

Resource Centers
--------Antivirus Research Center
Download Updates
Virus Encyclopedia
Virus Hoaxes
Reference Area
Submit Virus Samples

Service and Support

About Symantec




Webmaster
Help

© 1995-2000 Symantec Corporation
All rights reserved.
Legal Notices
spacer Volume 3, Issue 3 - March 16, 1998

The Symantec AntiVirus Research Center (SARC) is committed to providing swift, global response to computer virus threats, proactively researching and developing technologies that eliminate such threats, and educating the public on safe computing practices.

Highlights Table of Contents



Current AntiVirus Products

The Symantec AntiVirus solution includes the following line-up of currently available products:

  • DOS/Windows 3.1—NAV 3.0, revision 3.11
  • DOS/Windows 3.1—NAV 4.0, revision 4.00

  • Windows 95—NAV 95 1.0, revision 95.0b
  • Windows 95—NAV 95 2.0, revision 2.01
  • Windows 95—NAV 95 4.0, revision 4.00

  • Windows NT—NAV NT 2.0, revision 2.01
  • Windows NT—NAV NT 4.0 for Workstations, revision 4.00
  • Windows NT—NAV NT 4.0 for Servers, revision 4.00
  • Windows NT—NAV Internet E-mail Gateways 1.01, revision 1.00
  • Windows NT—NAV Firewalls 1.0, revision 1.00

  • Novell—NAV NetWare, revision 2.05

  • Lotus—Norton AntiVirus for Lotus Notes

  • Netscape—NAV Internet, revision 1.00

  • Macintosh/Power Macintosh—SAM, revision 4.0.8
  • Macintosh/Power Macintosh—SAM, revision 4.51

You can get the latest updates to many of these products through any of the following online services:
CompuServe: GO SYMANTEC
America Online: Keyword: SYMANTEC
Symantec World Wide Web site: http://www.symantec.com
Symantec FTP: ftp://ftp.symantec.com
BBS (28.8 baud): (541) 484-6669 and (541) 984-5366

If you don’t have electronic access, you can contact our Customer Service at (800) 441-7234 and order a disk set for $12 (to cover shipping and handling only).



Keeping Up With SARC

Update Your Virus Definitions

The latest virus definition set (dated March 2, 1998) is available for downloading from the SARC website and other online services. However, if you're using our latest Norton AntiVirus 4.0 products for Windows 95 or Windows NT, you can click the attached file, called LIVEUPDT.NLU, and launch LiveUpdate automatically!



Announcing the Symantec Security Center

Are you concerned about Internet security? If so, the Symantec Security Center is the perfect place for you to visit. The site contains information on subjects ranging from digital signatures and encryption basics to finding and removing personal information on the Internet.

The Symantec Security Team continually updates the Security Alerts page to keep you informed about hot security issues in the news. Other topics include choosing effective passwords, email security, online transaction issues, and what to do about SPAM. The site also offers information on downloading free Norton security products like Norton Safe on the Web and Norton Secret Stuff. Check out the Symantec Security Center at:

http://www.symantec.com/avcenter/security


The Death of Michelangelo


The most well-known computer virus in the world is officially a non-threat. Worldwide, the Symantec AntiVirus Research Center received only two confirmed reports of damage caused by the Michelangelo virus this March 6th.

This news is heartening because it proves that with careful and consistent application of virus protection, the threat of computer viruses can be overcome.



In The Wild

In each issue of the SARC AntiVirus News Update, we profile a few viruses known to be in free distribution among the general public ("in the wild"). However, this month we are covering a new virus hoax which is causing some unnecessary concern.

For information on this and other virus hoaxes, see:

http://www.symantec.com/avcenter/hoax.html Win a Holiday
Aliases: Hoax
Infection length: Hoax
Area of infection: Hoax
Likelihood: Hoax
Region Reported: Online
Characteristics: Hoax
Target Platform: Hoax
Trigger Date: Hoax
Description:

Win a Holiday is not a virus. It is a sham, meant only to panic new or inexperienced computer users. In addition, it is a mild variant of the "Join the Crew" hoax (form 4).

The hoax message includes the following "warning:"

     VIRUS WARNING !!!!!!

     If you receive an email titled "WIN A HOLIDAY" DO NOT open it. 
     It will erase everything on your hard drive. Forward this letter
     out as many people as you can. This is a new, very malicious 
     virus and not many people know about it. This information was 
     announced yesterday morning from Microsoft; please share it with
     everyone that might access the Internet. Once again, pass this 
     along to EVERYONE in our address book so that this may be 
     stopped. Also, do not open or even look at any mail that says 
     "RETURNED OR UNABLE TO DELIVER" This virus will attach itself to
     your computer components and render them useless. Immediately 
     delete any mail items that say this. AOL has said that this is 
     a very dangerous virus and that there is NO remedy for it at 
     this time. Please practice cautionary measures and forward this 
     to all your online friends ASAP.

Please ignore any messages regarding this supposed "virus" and do not pass the messages on. Spreading warnings about this hoax serves only to further propagate it.

For information on viruses found in general distribution, see the SARC website at:

http://www.symantec.com/avcenter/vinfodb.html


Most Frequently Reported Viruses

Following is a list of the top reported viruses, as published in the Joe Wells' Wild List last February:


1. WM.Concept.A
2. Form.A
3. AntiEXE.A
4. One_Half.3544
5. Junkie.1027.A
6. Empire.Monkey.B
7. AntiCMOS.A
8. Parity_Boot.B
9. Natas.4744
10. WM.Npad.A

11. WM.Wazzu.A
12. Ripper
13. WM.CAP.A
14. NYB.A
15. Sampo
16. Stoned.Angelina
17. Die_Hard.4000.A
18. Stoned.No_INT.A
19. WelcomB
20. Boot-437.A


Active Desktop Calendar


Now you can have the power of world's largest virus encyclopedia right on your desktop--the Active Desktop Virus Trigger Calendar.

This calendar shows you the upcoming trigger dates for common computer viruses and includes links to detailed virus information at the Symantec AntiVirus Research Center website.

Microsoft Internet Explorer 4.0 is required for viewing. You'll find the calendar at:

http://www.symantec.com/avcenter/cal/index.html (no longer avilable)


Virus Watch

The viruses listed below activate or trigger in the upcoming months. Virus activations/triggers are not necessarily destructive. This information is provided for educational purposes only and is not intended to alarm. Detailed information on all of these viruses can be found on the SARC website.

-------------------------------------------- 
March
-------------------------------------------- 
EVERY SUNDAY -- Jerusalem.Sunday.A
EVERY SATURDAY -- Xuxa.1656
ANY DAY -- Exe_Bug.C
1st -- WM.MDMA
1st -- Wm.Theatre:Tw
1st -- Wm.Twno.B
1st -- Wm.Twno.C
2nd -- Flip
3rd -- Pieck.4444
5th -- Xm.Delta
6th -- Stoned.Michelangelo
10th -- WM.Helper
13th -- Dr&Et.1710
15th -- Maltese_Amoeba
15th -- Wm.Theatre:Tw
15th -- Wm.Twno.D
18th -- Form
20th -- Wm.Outlaw
22nd -- 10_Past_3
24th -- Npox-963.A
25th -- Wm.Twno.D
28th -- Wm.Twno.B
28th -- Wm.Twno.C

-------------------------------------------- 
April
-------------------------------------------- 
EVERY SUNDAY -- Jerusalem.Sunday.A
1st -- WM.MDMA
1st -- Wm.Theatre:Tw
1st -- Wm.Twno.B
1st -- Wm.Twno.C
2nd -- Flip
5th -- Stoned.Daniela
5th -- Xm.Delta
5th -- WM.Nuclear
7th -- 15_Years
10th -- WM.Helper
13th -- Dr&Et.1710
15th -- Wm.Theatre:Tw
15th -- Wm.Twno.D
18th -- Form
20th -- Wm.Outlaw
21st -- WM.Saver:De
22nd -- 10_Past_3
24th -- Npox-963.A
25th -- Cavaco
25th -- Sarampo.1371
25th -- Wm.Twno.D
28th -- Wm.Twno.B
28th -- Wm.Twno.C


Subscribe and Unsubscribe

To be added to the subscription mailing list, please fill out the form available on the SARC website at:

http://www.symantec.com/avcenter/newsletter.html

If you want to be removed from this mailing list, simply send an e-mail to listserv@lserver.symantec.com with the following on a line by itself in the body of the message:

SIGNOFF SARC-L


Editor: Alex Haddox, Product Manager, Symantec AntiVirus Research Center

Address all correspondence to:
Symantec Corporation
AntiVirus Research Center
attn.: AntiVirus News Update
2500 Broadway, Suite 200
Santa Monica, CA 90404
USA

SARC AntiVirus News Update is published monthly by Symantec Corporation. Copyright © 1997 Symantec Corporation. All rights reserved. No Reprint without Permission in writing, in advance.

Archives of these newsletters are available for reading on the SARC WWW site at:

http://www.symantec.com/avcenter/refa.html