KUALA LUMPUR -- July 20, 2001 --

Date	July 20, 2001
Virus Name	CodeRed Worm
Threat Assessment	Level 2
Definitions	To remove the worm, obtain and apply the patch located at http://microsoft.com/technet/security/bulletin/MSO1-033.asp. Administrators are encouraged to apply this patch to prevent infection from this worm as well as other unauthorised access.   For further information please visit the SARC website: http://www.symantec.com/avcenter/
Description	The CodeRed worm affects systems running Microsoft Index Server 2.0 or the Windows 2000 Indexing service. The worm exploits a known buffer overflow condition which has been patched by Microsoft. In addition to seeking out new hosts to attack, the worm may attempt a Denial of Service attack between the 20th and 28th on www.whitehouse.gov. Patching the system and rebooting will remove the worm and prevent further infection. Symantec has released Security Update 8 for NetProwler, its network-based IDS system that detects attempts to exploit the vulnerability.  Symantec has also released an update to ESM that checks for the specific Microsoft hotfix for IIS and alerts if the system is vulnerable.
ABOUT SYMANTEC ANTIVIRUS RESEARCH CENTRE (SARC):	SARC is one of the industry’s largest dedicated teams of virus experts. With offices located in the United States, Japan, Australia and the Netherlands, the sun never sets on SARC. The centre’s mission is to provide swift, global responses to computer virus threats, proactively research and develop technologies that eliminate such threats and educate the public on safe computing practices. As new computer viruses appear, SARC develops identification and detection for these viruses and provides either a repair or delete operation, thus keeping users protected against the latest virus threats.
ABOUT SYMANTEC:	Symantec, a world leader in Internet security technology, provides a broad range of content and network security solutions to individuals and enterprises. The company is a leading provider of virus protection, firewall and virtual private network, vulnerability management, intrusion detection, Internet content and e-mail filtering, remote management technologies and security services to enterprises around the world. Symantec’s Norton brand of consumer security products leads the market in worldwide retail sales and industry awards. Headquartered in Cupertino, Calif., Symantec has worldwide operations in 37 countries. For more information, please visit our Web site at www.symantec.com. NOTE TO EDITORS: If you would like additional information on Symantec Corporation and its products, please view the Symantec Press Centre at http://www.symantec.com/region/au_nz/PressCenter/ on Symantec's Web site.