Symantec Delivers Cutting-Edge Anti-Virus Technology With Striker32

Advanced AV Engine to Combat Complex 32-Bit Windows-Based Viruses

CUPERTINO, Calif. Oct. 1, 1999 - Symantec Corporation (Nasdaq: SYMC) today announced Striker32, the most advanced virus detection and repair technology engineered to combat the growing threat of complex 32-bit Windows-based viruses. Striker32, included in all Norton AntiVirus products, works by setting up a virtual Pentium-based Windows "clean room" in which a suspect Windows program is allowed to run. By analyzing each program as it works, Striker32 is able to determine whether the program is infected. Uninfected files are processed quickly, which minimizes the impact of scanning on system performance.

Once identified by Striker32, an infected file is safely isolated using Norton AntiVirus' Quarantine feature. From there, the Scan and Deliver feature of Norton AntiVirus enables users to send the file over the Internet to the Symantec AntiVirus Research Center (SARC) for analysis and repair. Scan and Deliver includes automated macro virus analysis and repair technology that enables virus cures to be created and delivered faster than the malicious code can spread.

"Striker32 makes it possible for our researchers to analyze complex viruses such as the W32.Bolzano virus and produce cures in minutes rather than the days required by traditional anti-virus technology," said Enrique Salem, vice president of Symantec's Security and Assistance Business Unit. "With Striker32 and Scan and Deliver technologies working together, Norton AntiVirus continues to be the most advanced, responsive and sophisticated anti-virus solution available."

With Striker32, users are protected against today's most sophisticated viruses, including all 17 variants of the W32.Bolzano virus. W32.Bolzano is considered the largest family of Windows viruses. The latest variants of W32.Bolzano have eluded detection by traditional anti-virus technology because the variants mutate and bury themselves deep within Windows executable files, hiding all signs of infection. In contrast, most traditional computer viruses attach their programming instructions to a few, well-known areas of executable files, making isolation and detection easy. Because Striker32 has the capability to detect viruses regardless of where the virus inserts itself or how it conceals its programming instructions, users are assured of having the most advanced defense against this growing threat.

Norton AntiVirus users can update their software to include Striker32 using the LiveUpdate feature. LiveUpdate automatically detects an Internet connection or modem, then connects to a Symantec server to download and install the latest virus definitions and software updates. In this case, LiveUpdate interacts with Symantec¹s core anti-virus program (NAVEX), to make the Striker32 modification quickly and easily. This combination of advanced Symantec technology means users can be assured they are always protected with the latest virus technology, even if more extensive changes are required to the program.

About Symantec
Symantec is a world leader in Internet security technology and technology solutions that help companies manage and support workforces that use laptop computers and other mobile devices.

The company is a leading provider of software products for the consumer market and is rapidly growing its presence as a provider of solutions to enterprise organizations

NOTE TO EDITORS: If you would like additional information on Symantec Corporation and its products, view the Symantec Press Center at www.symantec.com/PressCenter/ on Symantec's Website.

Brands and products referenced herein are the trademarks or registered trademarks of their respective holders. All prices noted are in US dollars and are valid only in the United States.