Symantec discovers new computer virus W32.Magistr.24876@mm
Hong Kong -- March 14, 2001 - Researchers at the Symantec AntiVirus Research Centre (SARC) have confirmed that W32.Magistr.24876@mm, an extremely fast-spreading polymorphic computer virus with email worm capability, is spreading itself across Europe and is expected to reach Asia overnight.
This virus is particularly dangerous as the email message may have up to six attachments and has a randomly generated subject line that has up to 60 characters. This makes identifying the virus very difficult, because subject headings are never consistent.
When launched or executed the worm uses Microsoft Outlook and Windows Address Book to email itself to all recipients in the user's address book.
Symantec customers can repair damage caused by W32.Magistr.24876@mm using the detection function within Norton AntiVirus. Definitions are currently being developed and should be available by Thursday 15 March. Customers will be able to download the definitions via LiveUpdate or from the Symantec website at www.sarc.com
Preliminary findings indicate that the virus and worm has a very dangerous payload.
W32.Magistr.24876@mm is a polymorphic virus and worm that attempts the following actions:
1. Infects all executable Windows files that are not DLLs;
2. Spreads via a STMP handler, meaning it does not need an e-mail client such as MS Outlook or Netscape to spread itself like with other dangerous worms and viruses;
3. Gathers e-mail addresses from the Windows address book and Outlook Express sent-items folders. It then attaches up to six random files and generates a random subject line that contains up to 60 characters;
4. Attempts to modify Win.ini files on network drives.
SARC recommends that administrators filter for attachments with a VBS extension immediately.
About Symantec AntiVirus Research Centre
Symantec AntiVirus Research Centre (SARC), is one of the industry's largest dedicated team of virus experts. With offices located in the United States, Japan, Australia, and the Netherlands, the sun never sets on SARC. The centre's mission is to provide swift, global responses to computer virus threats, proactively research and develop technologies that eliminate such threats, and educate the public on safe computing practices. As new computer viruses appear, SARC develops identification and detection for these viruses, and provides either a repair or delete operation, thus keeping users protected against the latest virus threats.
About Symantec
Symantec, a world leader in Internet security technology, provides a broad range of content and network security solutions to individuals and enterprises. The company is a leading provider of virus protection, risk management, Internet content and e-mail filtering, remote management and mobile code detection technologies to customers. Headquartered in Cupertino, California, Symantec has worldwide operations in more than 36 countries.
# # #
NOTE TO EDITORS: If you would like additional information on Symantec Corporation and its products, please view the Symantec Press Centre at http://www.symantec.com/PressCenter
Issued on behalf of Symantec Corporation by Newell Public Relations
|
