Symantec discovers new computer worm infecting thousands

Corporations worldwide infected by virus CodeRed Worm

MUMBAI -- August 6, 2001

WHAT:	Researchers at the Symantec AntiVirus Research Center (SARC) are issuing a warning about a new worm: CodeRed Worm. At this stage it has had a small local impact and Symantec is rating it a Level 2 threat, which means it has a medium rating.
CHARACTERISTICS	The worm affects systems running Microsoft Index server 2.0 or the Windows 2000 Indexing service. The worm exploits a known buffer overflow condition, which has been patched by Microsoft. In addition to seeking out new hosts to attack, the worm may attempt a Denial of Service attack between the 20th and 28th on www. Whitehouse.gov.
RECOMMENDATIONS /PROTECTION:	Patching the system and rebooting will remove the worm and prevent further infection. Symantec has released Security Update 8 for NetProwler, the network-based IDS system that detects attempts to exploit the vulnerability. Symantec has also released an update to ESM that checks for the specific Microsoft hot fix for IIS and alerts if the system is vulnerable. For further information please visit the SARC website: http://www.symantec.com/avcenter/
ABOUT SYMANTEC ANTIVIRUS RESEARCH CENTRE (SARC):	SARC is one of the industry’s largest dedicated teams of virus experts. With offices located in the United States, Japan, Australia and the Netherlands, the sun never sets on SARC. The centre’s mission is to provide swift, global responses to computer virus threats, proactively research and develop technologies that eliminate such threats and educate the public on safe computing practices. As new computer viruses appear, SARC develops identification and detection for these viruses and provides either a repair or delete operation, thus keeping users protected against the latest virus threats.
ABOUT SYMANTEC:	Symantec, a world leader in Internet security technology, provides a broad range of content and network security solutions to individuals and companies. The company is a leading provider of virus protection, risk management, Internet content and email filtering, and mobile code detection technologies to enterprise customers. Headquartered in Cupertino, Calif., Symantec has worldwide operations in more than 24 countries. NOTE TO EDITORS: If you would like additional information on Symantec Corporation and its products, please view the Symantec Press Centre. Brands and products referenced herein are the trademarks or registered trademarks of their respective holders.