Independent research shows Norton AntiVirus 5.0 is able to detect and repair 100 per cent of in-the-wild viruses

SYDNEY --NSW - March 26, 1999 -- Research conducted by Secure Computing¹, one of the world's leading anti-virus certification authorities, has revealed that Norton AntiVirus 5.0 is able to detect and repair 100 per cent² of in-the-wild viruses. The full report can be found on: http://www.westcoast.com/ and http://www.infosecnews.com/.

The research was conducted by technicians at Secure Computing's labs in the UK on latest versions of products from the world's leading anti-virus vendors. The tests were run on Windows 98 against the Wildlist Organization's January 1999 list of 293 viruses to establish the products' ability to detect and repair in-the-wild viruses.

Commenting on the research in a press release issued by West Coast Labs, the certification part of Secure Computing magazine, Paul Robinson, technical director, said: "There is now little differentiation between the leading products in terms of their ability to detect viruses. For all users, but particularly corporate organisations, detecting a virus is of little value if the anti-virus software they are using is incapable of disinfection also. Vendors should be striving towards providing complete protection -- detection and disinfection."

"With more than 10-15 new viruses every day, it is critical for users to keep their anti-virus software up-to-date so they can stay protected," said John Donovan, general manager, Symantec Australia and New Zealand. "The Symantec AntiVirus Research Centre (SARC) offers Norton AntiVirus users weekly virus definition updates which are accessible every Friday afternoon by downloading the Intelligent Updater directly from the Web site (www.symantec.com) or by using Symantec's exclusive automatic LiveUpdate feature. By increasing the frequency of the virus definition updates from monthly to weekly, SARC is able to provide our customers with the most up-to-date and reliable protection available on the market today."

Changing market landscape
1998 was a period of intense anti-virus market change with key players announcing a number of acquisitions and major alliances. As a result of the changing market landscape, 1999 promises to be a year in which many organisations will have to transition to a new anti-virus standard.

A recent white paper produced by the META Group entitled Anti-Virus: Time to Review, stated in the section called "24 months of Consolidation and Forced Change": "Organisations should not automatically consider falling into the 'gravity well' of migrating to a particular vendor because that vendor now owns the technology currently installed. A critical factor in the [corporate end user's] selection process should be a vendor's migration or deployment capability. Most migrations will require a deinstallation of the existing product followed by a reinstallation of the new product. Indeed, we believe the requirement for product migration presents a prime opportunity for organisations to start fresh and select a top tier vendor that will meet their specific requirements."

Symantec has gained commitments from more than 4,000 companies representing over two million seats worldwide to transition to Norton AntiVirus and has developed services to deliver a smooth transition for customers. The service combines tools, such as unobtrusive uninstall/reinstall utilities, with on-site training and assistance from transition consultants.

About Checkmark
The Checkmark provides a clear and unambiguous indication of attainment of a relevant standard for users of computer security solutions. The Checkmark consists of a standard, a test and a certificate. The standard is a real-world, industry accepted test. The test may be carried out by West Coast Labs or by an accredited tester. The certificate is awarded by West Coast Labs. Several Checkmarks exist currently (or are imminent):

• Anti-virus Checkmark
• Trojan Checkmark
• Firewall Checkmark
• Year 2000 Checkmark
• UPS Checkmark
• VPN Checkmark

The Anti-Virus Checkmark, conducted by West Coast Labs, tests to see that the products can detect those viruses which are actually causing infections in the real world. This gives a clear and independent indication to end users that these anti-virus products can be relied on. This testing procedure is repeated at least every three months and if a product fails to preserve its level of detection, its Checkmark is suspended and even withdrawn if the manufacturer does not improve the product's detection. This means that users can rely on Checkmarked products since the manufacturers are making a serious commitment to the quality of their products that is being independently verified by West Coast Labs.

Users can easily verify that a product has a Checkmark by looking at the product box to see if it carries the Checkmark logo, by contacting West Coast Labs, or by visiting the Checkmark web site. The Checkmark is the dominant global standard of effectiveness of computer security products.

Secure Computing Research - interim results

100% disinfection

1. Norton AntiVirus 5.01.01 with update 3/1/99
   All items successfully disinfected
2. Command AntiVirus 4.54 with update 3/3/99
   All items successfully disinfected
3. InoculateIT 5.00 + update 4.18
   All items successfully disinfected

Partial or incomplete disinfection

1. Dr Solomon's AVTK Version 7.93
   No disinfection for :
   • W97M.Class.D
   • Tentacle.10634 - W97M.Class.Q
   • W95.E1 Inca
   • W97M.Coldape.A
     Incomplete disinfection of:
   • Natas (boot sector)
   • W95.CIH.1.4
   • W95.CIH.1.2

2. McAfee VirusScan 4.0.2 + update 4015
   No disinfection for Natas (boot sector)
   Incomplete disinfection of W95.El Inca

3. Norman Virus Control Version 4.64
   No disinfection for:
   • 11 file viruses
   • 5 macro viruses
   • All boot sector viruses

4. Trend OfficeScan 3.11b + update 507
   No disinfection for:
   • W97M.Brenda.A
   • W97M.Class.Q
     Incomplete disinfection for:
   • WM.Copycap.A
   • Nilz
   • Quicky.1376
   • W95.El Inca
   • Stoned.Azusa
   • Stoned.Standard.B

5. Sophos Sweep 3.19
   No file virus disinfection available
   No or incomplete disinfection for 20 boot sector viruses

Tests run on Windows 98 against the January 1999 Wildlist Organization's virus list. Results shown here are interim, further tests are being conducted and final results and analysis will be published at the InfoSec World conference in Orlando, Florida.

About Symantec
Symantec Corporation helps make computer users productive and keep their systems safe and reliable anywhere, anytime. The company is focused on addressing customer needs in three main application areas: the Norton product line of anti-virus and PC-assistance products; the pcAnywhere, WinFax and ACT! product lines that cater to remote user productivity; and the Cafe product lines in Internet development tools.

Founded in 1982, Symantec maintains corporate headquarters in Cupertino, California with regional offices in Sydney, Melbourne, Auckland, Hong Kong, Beijing, Taiwan, Seoul, Tokyo, Singapore and Malaysia. Traded on Nasdaq under the symbol SYMC, Symantec is ranked in the top ten international software vendors and employs more than 2,300 people worldwide. Information on the company and its products can be obtained at the Symantec Asia-Pacific Press Centre on the World Wide Web at http://www.symantec.com/region/au_nz/PressCenter/index.html.

All information contained in press release is accurate and valid at of the date of issue. All content is subject to change. For the latest information about Symantec Corporation and Symantec products, please contact: www.symantec.com.