Symantec discovers new computer worm infecting thousands

Corporations worldwide infected by virus W32. Leave. Worm

MUMBAI -- June 25, 2001

WHAT:	Researchers at the Symantec AntiVirus Research Center (SARC) are issuing a warning about a new worm: W32. Leave. Worm. At this stage it has had a small local impact and Symantec is rating it a Level 3 threat which means it has a medium rating. Definitions: Are available from the SARC website as of June 24, 2001.
CHARACTERISTICS	To be infected the computer user will need to click on a linkto a html address received via email or chat rooms. When the user clicks on the address it will download three to five different files from many websites. Some of these websites have already been closed down. The file names downloaded are not consistent. Once the files are downloaded it automatically runs itself. It will also run when the machine is rebooted or is running ICQ. This worm is very complex and there are many modules that cause different effects. Some of these include: Watches for connection to IRC, ICQ, Hotmail, Napster, Microsoft Messenger and potentially monitors information that you input Creates new registry keys
RECOMMENDATIONS /PROTECTION:	Symantec customers can repair damage caused through the detection function within Norton AntiVirus. For further information please visit the SARC website:http://www.symantec.com/avcenter/
ABOUT SYMANTEC ANTIVIRUS RESEARCH CENTRE (SARC):	SARC is one of the industry's largest dedicated teams of virus experts. With offices located in the United States, Japan, Australia and the Netherlands, the sun never sets on SARC. The centre's mission is to provide swift, global responses to computer virus threats, proactively research and develop technologies that eliminate such threats and educate the public on safe computing practices. As new computer viruses appear, SARC develops identification and detection for these viruses and provides either a repair or delete operation, thus keeping users protected against the latest virus threats.
ABOUT SYMANTEC:	Symantec, a world leader in Internet security technology, provides a broad range of content and network security solutions to individuals and companies. The company is a leading provider of virus protection, risk management, Internet content and email filtering, and mobile code detection technologies to enterprise customers. Headquartered in Cupertino, Calif., Symantec has worldwide operations in more than 24 countries. NOTE TO EDITORS: If you would like additional information on Symantec Corporation and its products, please view the Symantec Press Centre at http://www.symantec.com/PressCenter/ on Symantec's Web site. Brands and products referenced herein are the trademarks or registered trademarks of their respective holders.