          
|
|
News Release Symantec Provides Detection For Fast-Spreading VBS.Stages.A Polymorphic Computer Worm CUPERTINO, Calif. - June 19, 2000 - Symantec Corporation (Nasdaq: SYMC), a leader in Internet security technology, today announced detection for VBS.Stages.A., a new and fast-spreading polymorphic computer worm. Symantec's Anti-Virus Research Lab gives this worm a Category 4 rating, as it has potential to be difficult to contain, and cause severe damage. This worm appears as a .TXT file attachment titled LIFE_STAGES.TXT.SHS. that disguises an .SHS file. An .SHS file is a Microsoft Scrap Object file which are executable files that can contain a wide variety of objects. The scrap object (SHS) extension does not appear in Windows Explorer even if all file extensions are displayed. When executed, the attachment will open a text file in the Notepad that describes the male and female stages of life. While the user is reading the text file, the script executes in the background, moving the REGEDIT.EXE file to the recycle bin as a hidden system file named RECYCLED.VXD. - resulting in modification of the SYSTEM REGISTRY and REGEDIT.EXE files that cause system instability. VBS.Stages.A spreads itself like VBS.LOVELETTER.A, sending mail to a users' entire MS Outlook address book with a randomly generated subject line, which can overload mail servers. Additionally, the worm spreads itself via ICQ, mIRC and PIRCH and copies itself to mapped drives. The subject line may be one of 12 combinations and in some cases begins with "FW." The subject line will contain either "Life stages," "Funny" or "Jokes" or several combinations of these. This worm immediately deletes copies of the sent emails to ensure there is no record of its presence. Symantec recommends that computer users do not attempt to open the attached document, and protect themselves by using Norton AntiVirus For Gateways to filter out all incoming emails that have attachments with .SHS extensions. New definition sets are now available to detect VBS.Stages.A and Norton AntiVirus users can download them through Symantec's LiveUpdate feature, or from the Symantec Web site at www.symantec.com/avcenter/download.html. SARC, Symantec's AntiVirus Research Center, is one of the industry's largest dedicated team of virus experts. With offices located in the United States, Japan, Australia, and the Netherlands, the sun never sets on SARC. The center's mission is to provide swift, global responses to computer virus threats, proactively research and develop technologies that eliminate such threats, and educate the public on safe computing practices. As new computer viruses appear, SARC develops identification and detection for these viruses, and provides either a repair or delete operation, thus keeping users protected against the latest virus threats.
About Symantec NOTE TO EDITORS: : If you would like additional information on Symantec Corporation and its products, please view the Symantec Press Center at http://www.symantec.com/PressCenter/ on Symantec's Web site. All prices noted are in US dollars and are valid only in the United States. Symantec, the Symantec logo, VERITAS, and the VERITAS logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the United States and certain other countries. Additional company and product names may be trademarks or registered trademarks of the individual companies and are respectfully acknowledged. FORWARD LOOKING STATEMENT: This press release contains forward-looking statements. There are certain important factors that could cause Symantec's future development efforts to differ materially from those anticipated by some of the statements made above. Among these are the anticipation of the growth of certain market segments, the positioning of Symantec's products in those segments, the competitive environment in the software industry, dependence on other products, changes to operating systems and product strategy by vendors of operating systems, and the importance of new Symantec products. Additional information concerning those and other factors is contained in the "Risk Factors" section of the company's annual report on Form 10-K for the fiscal year ended April 2, 1999.
Press Center
|