Symantec Security Response tracks W32.Klez as one of the fastest spreading viruses to date

Symantec Security Response tracks W32.Klez as one of the fastest spreading viruses to date

Symantec Urges Customers to Update Virus Definitions and Security Patches to Prevent Infection

SYDNEY --NSW - April 26, 2002 -- Symantec Security Response has upgraded W32.Klez to a level 4 virus threat. W32.Klez and its variants are spreading more quickly than most viruses that Symantec Security Response has tracked.

On average, Symantec Security Response is receiving more than 3,000 submissions globally per day of W32.Klez and its variants. In comparison, at the peak of the Sircam virus, Symantec Security Response received approximately 1,500 submissions per day.

"In the Asia Pacific region W32.Klez and its variants is continuing to spread at a fast pace and is impacting computer users both at an enterprise and consumer level", said John Donovan , Managing Director, Symantec Australia and New Zealand. "Symantec recommends users to update their virus definitions so that they are fully protected."

W32.Klez.H@mm spreads by sending itself as an attachment to e-mail addresses found in the Windows address book, the ICQ database, and local files. The e-mail arrives with a random subject line. The worm randomly chooses a file from the infected machine to send along with the worm to recipients. It spreads through network share drives and is capable of infecting files.

Additionally, the worm exploits an old vulnerability in Microsoft Outlook and Outlook Express in an attempt to execute itself when the user opens or even previews the message. Information and a patch for the vulnerability can be found at http://www.microsoft.com/technet/security/bulletin/MS01-020.asp.

Symantec Security Response recommends users update their virus definitions and Microsoft security patches to prevent infection. For detailed information and removal tool for W32.Klez, visit the Symantec Security Response Web site at http://securityresponse.symantec.com.

Computer users who are concerned that they may have received a virus can easily scan their system using Symantec Security Check Web site at http://security.symantec.com/au.

About Symantec Security Response
Symantec Security Response is a team of Internet security experts who deliver solutions, services and response capabilities to Symantec customers worldwide, 24 hours a day, seven days a week. The research centres are focused on collecting and analysing the latest malware threats such as viruses and worms, as well as network security threats and vulnerabilities. Symantec's technical support experts provide customers with information on product implementation and usage, as well as countermeasures and identification tools for new threats. Symantec Security Response also provides time-sensitive security advisories using Web updates, alerting services, technical support and media alerts.

About Symantec
Symantec, the world leader in Internet security technology, provides a broad range of content and network security software and appliance solutions to individuals, enterprises and service providers. The company is a leading provider of client, gateway and server security solutions for virus protection, firewall and virtual private network, vulnerability management, intrusion detection, Internet content and e-mail filtering, remote management technologies and security services to enterprises and service providers around the world. Symantec's Norton brand of consumer security products is a leader in worldwide retail sales and industry awards. Headquartered in Cupertino, Calif., Symantec has worldwide operations in 37 countries. For more information, please visit www.symantec.com.au.

NOTE TO EDITORS: If you would like additional information on Symantec Corporation and its products, please view the Symantec Press Center at http://www.symantec.com/PressCenter/ on Symantec's Web site. All prices noted are in US dollars and are valid only in the United States.

Symantec and the Symantec logo are trademarks or registered trademarks, in the United States and certain other countries, of Symantec Corporation. Additional company and product names may be trademarks or registered trademarks of the individual companies and are respectfully acknowledged.

FORWARD LOOKING STATEMENT: This press release contains forward-looking statements, including statements regarding anticipated activities and results, that involve known and unknown risks, uncertainties and other factors that may cause our actual results, levels of activity, performance or achievements to differ materially from results expressed or implied by this press release. Such risk factors include, among others: the risks that current global adverse economic conditions and reduced spending will continue or worsen; currency exchange fluctuations will adversely affect our results; the difficulty of developing and marketing products that compete effectively with others; new security threats and other economic, business, competitive and/or regulatory factors affecting Symantec's business generally. Actual results may differ materially from those contained in the forward-looking statements in this press release. Additional information concerning these and other risk factors is contained in the Risk Factors sections of the Company's previously filed Form 10-K for the year ended March 30, 2001 and the Form 10-Q for the quarter ended Dec. 28, 2001.