Symantec Provides Detection For Fast-Spreading VBS.Stages.A Polymorphic Computer Worm
CUPERTINO, Calif. - June 19, 2000 - Symantec Corporation (Nasdaq: SYMC), a
leader in Internet security technology, today announced detection for
VBS.Stages.A., a new and fast-spreading polymorphic computer worm. Symantec's
Anti-Virus Research Lab gives this worm a Category 4 rating, as it has potential
to be difficult to contain, and cause severe damage. This worm appears as a .TXT
file attachment titled LIFE_STAGES.TXT.SHS. that disguises an .SHS file. An .SHS
file is a Microsoft Scrap Object file which are executable files that can contain
a wide variety of objects. The scrap object (SHS) extension does not appear in
Windows Explorer even if all file extensions are displayed.
When executed, the attachment will open a text file in the Notepad that describes
the male and female stages of life. While the user is reading the text file, the
script executes in the background, moving the REGEDIT.EXE file to the recycle bin
as a hidden system file named RECYCLED.VXD. - resulting in modification of the
SYSTEM REGISTRY and REGEDIT.EXE files that cause system instability.
VBS.Stages.A spreads itself like VBS.LOVELETTER.A, sending mail to a users'
entire MS Outlook address book with a randomly generated subject line, which can
overload mail servers. Additionally, the worm spreads itself via ICQ, mIRC and
PIRCH and copies itself to mapped drives. The subject line may be one of 12
combinations and in some cases begins with "FW." The subject line will contain
either "Life stages," "Funny" or "Jokes" or several combinations of these. This
worm immediately deletes copies of the sent emails to ensure there is no record
of its presence. Symantec recommends that computer users do not attempt to open
the attached document, and protect themselves by using Norton AntiVirus For
Gateways to filter out all incoming emails that have attachments with .SHS
extensions. New definition sets are now available to detect VBS.Stages.A and
Norton AntiVirus users can download them through Symantec's LiveUpdate feature,
or from the Symantec Web site at www.symantec.com/avcenter/download.html.
SARC, Symantec's AntiVirus Research Center, is one of the industry's largest
dedicated team of virus experts. With offices located in the United States,
Japan, Australia, and the Netherlands, the sun never sets on SARC. The center's
mission is to provide swift, global responses to computer virus threats,
proactively research and develop technologies that eliminate such threats, and educate the public on safe
computing practices. As new computer viruses appear, SARC develops identification
and detection for these viruses, and provides either a repair or delete
operation, thus keeping users protected against the latest virus threats.
Symantec, a world leader in Internet security technology, provides a broad range
of content security solutions to individuals and companies. The company is a
leading provider of anti-virus protection, Internet content and e-mail filtering,
and mobile code detection technologies to enterprise customers. Headquartered in
Cupertino, Calif., Symantec has worldwide operations in more than 24 countries.
NOTE TO EDITORS:
: If you would like additional information on Symantec Corporation and its products, please view the Symantec Press Center at http://www.symantec.com/PressCenter/ on Symantec's Web site. All prices noted are in US dollars and are valid only in the United States.
Symantec, the Symantec logo, VERITAS, and the VERITAS logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the United States and certain other countries. Additional company and product names may be trademarks or registered trademarks of the individual companies and are respectfully acknowledged.
FORWARD LOOKING STATEMENT: This press release contains forward-looking statements. There are certain important factors that could cause Symantec's future development efforts to differ materially from those anticipated by some of the statements made above. Among these are the anticipation of the growth of certain market segments, the positioning of Symantec's products in those segments, the competitive environment in the software industry, dependence on other products, changes to operating systems and product strategy by vendors of operating systems, and the importance of new Symantec products. Additional information concerning those and other factors is contained in the "Risk Factors" section of the company's annual report on Form 10-K for the fiscal year ended April 2, 1999.
News Releases |