New Computer Virus Spreads by E-Mail and Triggers on Christmas Day

Symantec Automatically Provides Cure for W97M.Prilissa.A Through its Macro Engine and Heuristic Technologies

CUPERTINO, Calif. - Nov. 22, 1999 - Symantec Corp. (Nasdaq: SYMC) today announced that users of Norton AntiVirus are automatically protected against a new self-propagating virus called W97M.Prilissa.A, by using the industry's most advanced and effective virus detection technology. The virus, which has been reported to be circulating on computers world-wide, infects Microsoft Word 97 documents and spreads itself by sending the infected document as an e-mail attachment using MS Outlook to the first 50 addresses in each address book. The subject line reads "Message From." The text in the body of the message reads, "This document is very important and you've GOT to read this!!!" When the infected document is opened, the virus disables virus protection security settings, conversion confirmation and recently opened file list.

Additionally, the W97M.Prilissa.A virus checks the system date to trigger its payloads. On December 25, the following text will be displayed in a message box when users boot their machines: "Vine... Vide... Vice...Moslem Power Never End...You Dare Rise Against Me...The Human Era is Over, The CyberNET Era Has Come!!!" It then overlays several coloured shapes onto the opened document, overwrites the AUTOEXEC.BAT file to format the C: drive, and displays the following text when the system is rebooted: "Vine...Vide...Vice...Moslem Power Never End...Your Computer Have Just Been Terminated By = CyberNET = Virus!!"

"Symantec was able to provide automatic detection and repair using our state-of-the-art macro virus detection and heuristic technologies," said Vincent Weafer, director of the Symantec AntiVirus Research Centre at Symantec Corp. "Our customers can be assured that by continuing to update their definitions on a regular basis, they will be protected with the industry's most advanced anti-virus technology."

Symantec's advanced macro variant and heuristic technology detected W97M.Prilissa.A as a variant of the W97M.AntiSocial.G and W97M.Melissa viruses. Macro variant technology analyses the actions and commands used by a set of viruses and leverages this to detect unknown viruses with the same characteristics. Heuristic technology enables virus detection by analysing a multitude of viruses, and identifying certain common traits that all viruses share. All Norton AntiVirus products incorporate both macro variant detection technology and Symantec's advanced heuristic technology, Bloodhound, which has to date been able to detect more than 90 percent of new and unknown macro viruses. Norton AntiVirus customers can download the current virus definition set, which includes a cure for the W97M.Prilissa.A virus, through Symantec's LiveUpdate feature or from the Symantec Web site at www.symantec.com/avcenter/download.html.

Symantec AntiVirus Research Centre SARC is one of the industry's largest dedicated team of virus experts. With offices located in the United States, Japan, Australia, and the Netherlands, the sun never sets on SARC. The centre's mission is to provide swift, global responses to computer virus threats, proactively research and develop technologies that eliminate such threats, and educate the public on safe computing practices. As new computer viruses appear, SARC develops identification and detection for these viruses, and provides either a repair or delete operation, thus keeping users protected against the latest virus threats.

About Symantec in Canada:
With 250 employees, Symantec's Canadian operations are headquartered in Toronto with offices in Montreal, Ottawa and Vancouver. For information on Symantec products or current promotions, contact the Canadian office at (416) 441-3676 or access Symantec's Canadian Web Site. Symantec is an active member of the Canadian Alliance Against Software Theft (CAAST).

About Symantec
Symantec is the world leader in utility software for business and personal computing. Symantec products and solutions help make users productive and keep their computers safe and reliable anywhere and anytime. Symantec offers a broad range of solutions and is acclaimed as a leader in both customer satisfaction and product brand recognition. Symantec is traded on Nasdaq under the symbol SYMC. More information on the company and its products can be obtained at www.symantec.com.

Founded in 1982, the company's global operations span North America, Europe, Japan and several fast growing markets throughout Asia Pacific and Latin America. Traded on Nasdaq under the symbol SYMC, Symantec Corporation is based in Cupertino, Calif., and employs more than 2,000 people. Information on the company and its products can be obtained by calling (800) 441-7234 toll free, (541) 334-6054 or accessed on the World Wide Web.

NOTE TO EDITORS: If you would like additional information on Symantec Corporation and its products, please view the Symantec Press Centre on Symantec's web site. Brands and products referenced herein are the trademarks or registered trademarks of their respective holders.

Brands and products referenced herein are the trademarks or registered trademarks of their respective holders.