********************************************************************** ** ** ** What's New in the NAV Virus Definitions Files WHATSNEW.TXT ** ** ** ** Symantec Security Response August 11, 2004 ** ** ** ********************************************************************** This document contains the following topics: * Virus Alerts * Changes Incorporated Into This Update * Additional Information ********************************************************************** ** Virus Alerts ** ********************************************************************** The ten most commonly reported viruses for July 2004, worldwide: 1 W32.Netsky.P@mm 2 W32.Netsky.P@mm!enc 3 Trojan Horse 4 W32.Beagle.X@mm 5 W32.HLLW.Gaobot.gen 6 W32.Erkez.B@mm 7 W32.Netsky.Z@mm 8 W32.Netsky.C@mm 9 W32.Netsky.D@mm 10 W32.Mydoom.A@mm.enc ********************************************************************** ** Changes Incorporated Into This Virus Definitions Update ** ********************************************************************** DATE ---- New virus definitions (sorted by Virus Name): Virus Name Infection Type Date added ---------- -------------- --------- Adware Dropper File infector 07/30/04 Adware.CDT File infector 08/06/04 Adware.ClickDLoader File infector 08/05/04 Adware.Clickbank File infector 08/04/04 Adware.EasySearch File infector 08/10/04 Adware.Fastfind File infector 07/27/04 Adware.FavBarCash File infector 08/04/04 Adware.GreenIo File infector 08/10/04 Adware.MSView File infector 08/10/04 Adware.MediaInject File infector 07/22/04 Adware.Multidropper File infector 08/04/04 Adware.OverPro File infector 07/20/04 Adware.PurityScan.C File infector 08/06/04 Adware.Searchbarcash File infector 07/29/04 Adware.WWWBar File infector 08/10/04 Backdoor.Agent.B File infector 07/21/04 Backdoor.Beasty.I File infector 08/10/04 Backdoor.Berbew.I File infector 07/27/04 Backdoor.Brador.A File infector 08/05/04 Backdoor.Futh File infector 07/28/04 Backdoor.Moonlit File infector 07/27/04 Backdoor.Pcclient File infector 08/04/04 Backdoor.Ranky.I File infector 07/28/04 Backdoor.Xordoor File infector 07/21/04 Backdoor.Zincite.A File infector 07/27/04 Bloodhound.Exploit.12 File infector 08/04/04 Bloodhound.Mydoom.Cli File infector 08/04/04 Dialer.HotPleasure.B File infector 08/10/04 Dialer.LiveCams File infector 08/02/04 Hacktool.Lemir.Kit File infector 08/05/04 PWSteal.Ldpinch.B File infector 07/23/04 PWSteal.Perfectspy File infector 08/03/04 Spyware.AceSpy File infector 07/20/04 Spyware.ActivMonAgent File infector 07/20/04 Spyware.ActivityLog File infector 07/20/04 Spyware.AtWinSpy File infector 08/10/04 Spyware.DesktopD File infector 08/06/04 Spyware.DesktopD.B File infector 08/06/04 Spyware.FKWPKeylog File infector 07/30/04 Spyware.FamilyCam File infector 08/05/04 Spyware.GhostKeyLog File infector 07/20/04 Spyware.IkitecKL File infector 07/20/04 Spyware.KeyCollect File infector 07/20/04 Spyware.MyLittleSpy File infector 08/05/04 Spyware.NetSpy File infector 08/05/04 Spyware.NetVizor File infector 07/20/04 Spyware.RemPSteal File infector 08/06/04 Spyware.SaveKeys File infector 08/06/04 Spyware.SpyAssault File infector 07/20/04 Spyware.WinGuardian File infector 08/09/04 Spyware.iProtectYou File infector 07/20/04 Trojan.Corem File infector 07/27/04 Trojan.Download.Inor.C File infector 07/29/04 Trojan.Exruntel File infector 07/30/04 Trojan.Fewest File infector 08/04/04 Trojan.Minit File infector 08/04/04 Trojan.Mitglieder.M File infector 07/28/04 Trojan.Mits File infector 07/23/04 Trojan.Mos File infector 08/10/04 Trojan.Sepuc File infector 07/22/04 Trojan.StartPage.F File infector 08/09/04 Trojan.StartPage.G File infector 08/09/04 Trojan.Wingle File infector 07/22/04 W32.Amus.A@mm File infector 08/06/04 W32.Asantia File infector 08/10/04 W32.Beagle.AH@mm File infector 07/22/04 W32.Beagle.AO@mm File infector 08/09/04 W32.Bugbros.C@mm File infector 07/29/04 W32.Evaman.C@mm File infector 08/04/04 W32.Forder File infector 08/04/04 W32.Fran@mm File infector 07/25/04 W32.Fugo File infector 08/04/04 W32.Gaobot.BAI File infector 07/21/04 W32.Gaobot.BAJ File infector 08/02/04 W32.Gugom File infector 08/04/04 W32.Jerem File infector 08/04/04 W32.Kadar File infector 08/04/04 W32.Korgo.AD File infector 08/02/04 W32.Korgo.Z File infector 07/27/04 W32.Leebad File infector 08/06/04 W32.Lovgate.AK@mm File infector 07/28/04 W32.Lovgate.AN@mm File infector 08/07/04 W32.Mota.B@mm File infector 07/27/04 W32.Mydoom.M@mm File infector 07/27/04 W32.Mydoom.N@mm File infector 07/29/04 W32.Mydoom.P@mm File infector 08/09/04 W32.Myfip.A File infector 08/04/04 W32.Rile File infector 07/20/04 W32.Rotor File infector 08/01/04 W32.Salvame File infector 07/20/04 W32.Saros@mm File infector 08/03/04 W32.Tibick File infector 07/27/04 W32.Zepp File infector 08/04/04 W32.Zindos.A File infector 07/27/04 W95.Delock File infector 08/04/04 W97M.Diperis.A File infector 07/20/04 W97M.Kuna File infector 07/21/04 W97M.Moridin File infector 07/28/04 W97M.Seliuq.D File infector 07/23/04 X97M.Ainesey.A@mm File infector 08/04/04 New virus definitions (sorted by Date added): Virus Name Infection Type Date added ---------- -------------- ---------- Adware.EasySearch File infector 08/10/04 Adware.GreenIo File infector 08/10/04 Adware.MSView File infector 08/10/04 Adware.WWWBar File infector 08/10/04 Backdoor.Beasty.I File infector 08/10/04 Dialer.HotPleasure.B File infector 08/10/04 Spyware.AtWinSpy File infector 08/10/04 Trojan.Mos File infector 08/10/04 W32.Asantia File infector 08/10/04 Spyware.WinGuardian File infector 08/09/04 Trojan.StartPage.F File infector 08/09/04 Trojan.StartPage.G File infector 08/09/04 W32.Beagle.AO@mm File infector 08/09/04 W32.Mydoom.P@mm File infector 08/09/04 W32.Lovgate.AN@mm File infector 08/07/04 Adware.CDT File infector 08/06/04 Adware.PurityScan.C File infector 08/06/04 Spyware.DesktopD File infector 08/06/04 Spyware.DesktopD.B File infector 08/06/04 Spyware.RemPSteal File infector 08/06/04 Spyware.SaveKeys File infector 08/06/04 W32.Amus.A@mm File infector 08/06/04 W32.Leebad File infector 08/06/04 Adware.ClickDLoader File infector 08/05/04 Backdoor.Brador.A File infector 08/05/04 Hacktool.Lemir.Kit File infector 08/05/04 Spyware.FamilyCam File infector 08/05/04 Spyware.MyLittleSpy File infector 08/05/04 Spyware.NetSpy File infector 08/05/04 Adware.Clickbank File infector 08/04/04 Adware.FavBarCash File infector 08/04/04 Adware.Multidropper File infector 08/04/04 Backdoor.Pcclient File infector 08/04/04 Bloodhound.Exploit.12 File infector 08/04/04 Bloodhound.Mydoom.Cli File infector 08/04/04 Trojan.Fewest File infector 08/04/04 Trojan.Minit File infector 08/04/04 W32.Evaman.C@mm File infector 08/04/04 W32.Forder File infector 08/04/04 W32.Fugo File infector 08/04/04 W32.Gugom File infector 08/04/04 W32.Jerem File infector 08/04/04 W32.Kadar File infector 08/04/04 W32.Myfip.A File infector 08/04/04 W32.Zepp File infector 08/04/04 W95.Delock File infector 08/04/04 X97M.Ainesey.A@mm File infector 08/04/04 PWSteal.Perfectspy File infector 08/03/04 W32.Saros@mm File infector 08/03/04 Dialer.LiveCams File infector 08/02/04 W32.Gaobot.BAJ File infector 08/02/04 W32.Korgo.AD File infector 08/02/04 W32.Rotor File infector 08/01/04 Adware Dropper File infector 07/30/04 Spyware.FKWPKeylog File infector 07/30/04 Trojan.Exruntel File infector 07/30/04 Adware.Searchbarcash File infector 07/29/04 Trojan.Download.Inor.C File infector 07/29/04 W32.Bugbros.C@mm File infector 07/29/04 W32.Mydoom.N@mm File infector 07/29/04 Backdoor.Futh File infector 07/28/04 Backdoor.Ranky.I File infector 07/28/04 Trojan.Mitglieder.M File infector 07/28/04 W32.Lovgate.AK@mm File infector 07/28/04 W97M.Moridin File infector 07/28/04 Adware.Fastfind File infector 07/27/04 Backdoor.Berbew.I File infector 07/27/04 Backdoor.Moonlit File infector 07/27/04 Backdoor.Zincite.A File infector 07/27/04 Trojan.Corem File infector 07/27/04 W32.Korgo.Z File infector 07/27/04 W32.Mota.B@mm File infector 07/27/04 W32.Mydoom.M@mm File infector 07/27/04 W32.Tibick File infector 07/27/04 W32.Zindos.A File infector 07/27/04 W32.Fran@mm File infector 07/25/04 PWSteal.Ldpinch.B File infector 07/23/04 Trojan.Mits File infector 07/23/04 W97M.Seliuq.D File infector 07/23/04 Adware.MediaInject File infector 07/22/04 Trojan.Sepuc File infector 07/22/04 Trojan.Wingle File infector 07/22/04 W32.Beagle.AH@mm File infector 07/22/04 Backdoor.Agent.B File infector 07/21/04 Backdoor.Xordoor File infector 07/21/04 W32.Gaobot.BAI File infector 07/21/04 W97M.Kuna File infector 07/21/04 Adware.OverPro File infector 07/20/04 Spyware.AceSpy File infector 07/20/04 Spyware.ActivMonAgent File infector 07/20/04 Spyware.ActivityLog File infector 07/20/04 Spyware.GhostKeyLog File infector 07/20/04 Spyware.IkitecKL File infector 07/20/04 Spyware.KeyCollect File infector 07/20/04 Spyware.NetVizor File infector 07/20/04 Spyware.SpyAssault File infector 07/20/04 Spyware.iProtectYou File infector 07/20/04 W32.Rile File infector 07/20/04 W32.Salvame File infector 07/20/04 W97M.Diperis.A File infector 07/20/04 Name Changes (sorted by Old Virus Name): Old Virus Name New Virus Name Date changed -------------- -------------- ------------ PWSteal.Tarno.E to PWSteal.Tarno.E 07/06/04 Adware Dropper to Adware.ClickDLoader 08/04/04 Backdoor.Padodor to Backdoor.Berbew.D 04/21/04 Backdoor.Sdbot.U to Backdoor.Sdbot.Y 04/23/04 Backdoor.Skobie.A to Spyware.FamilyKeylog 05/02/04 EPOC.Cabir to SymbOS.Cabir 06/21/04 JS.Offiz to Trojan.Offiz 06/21/04 O97M.Tristate.Variant to O97M.Tristate.B 06/04/04 PWSteal.Skobie to Spyware.SpyAgent 05/12/04 PWSteal.Skobie.B to Backdoor.Haxdoor.B 05/20/04 PWSteal.Skobie.C to W32.Gaobot.ALV 05/25/04 Trojan.Ascetic.A to W32.Erkez.B@mm (2) 06/14/04 Trojan.Mits to W32.Mits.A@mm 07/25/04 Trojan.Simcss.B to Adware.Slagent 04/26/04 Trojan.Wingle to Trojan.Mitglieder.M 07/23/04 W32.Ainesey.A@mm (vbs) to W32.Ainesey.A@mm!vbs 06/30/04 W32.Beagle.AF@mm to W32.Mydoom.L@m 07/19/04 W32.Bobax.A to W32.Bobax.B 05/19/04 W32.Dumaru.AJ@mm to Backdoor.Nibu.F 05/18/04 W32.HLLW.Antinny.L to Trojan.Upbit 05/23/04 W32.HLLW.Gearbug@mm to W32.Bugbros.B@mm 04/26/04 W32.Korgo.H to W32.Korgo.I 06/29/04 W32.Korgo.I to W32.Korgo.N 06/29/04 W32.Korgo.M to W32.Korgo.S 06/28/04 W32.Korgo.N to W32.Korgo.T 06/28/04 W32.Korgo.O to W32.Korgo.U 06/28/04 W32.Korgo.Q to W32.Korgo.V 06/28/04 W32.LovGate.Z@mm to W32.Lovgate.Z@mm 07/06/04 W32.Mintop@mm to W32.Bigfairy.C@mm 04/19/04 W32.Mota.A to W32.Mota.A@mm 07/06/04 W32.Mydoom.L@m to W32.Mydoom.L@mm 07/19/04 W32.Netsup@mm to W32.Netsup.A@mm 05/31/04 W32.Poco to W32.Korgo.Y 07/13/04 W32.Randex.XU to Trojan.Niska 04/18/04 W32.Sober.H@mm to Trojan.Ascetic.A 06/12/04 W97.Saver.H to W97M.Saver.H 05/07/04 W97M.Anumps.A (dr) to IRC.Anumps.A 07/06/04 WM.Not_a_virus to WM.Schupfl 06/21/04 Worm.Automat.AHP to W32.Gorm@mm 07/07/04 Name Changes (sorted by Date changed): Old Virus Name New Virus Name Date changed -------------- -------------- ------------ Adware Dropper to Adware.ClickDLoader 08/04/04 Trojan.Mits to W32.Mits.A@mm 07/25/04 Trojan.Wingle to Trojan.Mitglieder.M 07/23/04 W32.Beagle.AF@mm to W32.Mydoom.L@m 07/19/04 W32.Mydoom.L@m to W32.Mydoom.L@mm 07/19/04 W32.Poco to W32.Korgo.Y 07/13/04 Worm.Automat.AHP to W32.Gorm@mm 07/07/04 PWSteal.Tarno.E to PWSteal.Tarno.E 07/06/04 W32.LovGate.Z@mm to W32.Lovgate.Z@mm 07/06/04 W32.Mota.A to W32.Mota.A@mm 07/06/04 W97M.Anumps.A (dr) to IRC.Anumps.A 07/06/04 W32.Ainesey.A@mm (vbs) to W32.Ainesey.A@mm!vbs 06/30/04 W32.Korgo.H to W32.Korgo.I 06/29/04 W32.Korgo.I to W32.Korgo.N 06/29/04 W32.Korgo.M to W32.Korgo.S 06/28/04 W32.Korgo.N to W32.Korgo.T 06/28/04 W32.Korgo.O to W32.Korgo.U 06/28/04 W32.Korgo.Q to W32.Korgo.V 06/28/04 EPOC.Cabir to SymbOS.Cabir 06/21/04 JS.Offiz to Trojan.Offiz 06/21/04 WM.Not_a_virus to WM.Schupfl 06/21/04 Trojan.Ascetic.A to W32.Erkez.B@mm (2) 06/14/04 W32.Sober.H@mm to Trojan.Ascetic.A 06/12/04 O97M.Tristate.Variant to O97M.Tristate.B 06/04/04 W32.Netsup@mm to W32.Netsup.A@mm 05/31/04 PWSteal.Skobie.C to W32.Gaobot.ALV 05/25/04 W32.HLLW.Antinny.L to Trojan.Upbit 05/23/04 PWSteal.Skobie.B to Backdoor.Haxdoor.B 05/20/04 W32.Bobax.A to W32.Bobax.B 05/19/04 W32.Dumaru.AJ@mm to Backdoor.Nibu.F 05/18/04 PWSteal.Skobie to Spyware.SpyAgent 05/12/04 W97.Saver.H to W97M.Saver.H 05/07/04 Backdoor.Skobie.A to Spyware.FamilyKeylog 05/02/04 Trojan.Simcss.B to Adware.Slagent 04/26/04 W32.HLLW.Gearbug@mm to W32.Bugbros.B@mm 04/26/04 Backdoor.Sdbot.U to Backdoor.Sdbot.Y 04/23/04 Backdoor.Padodor to Backdoor.Berbew.D 04/21/04 W32.Mintop@mm to W32.Bigfairy.C@mm 04/19/04 W32.Randex.XU to Trojan.Niska 04/18/04 Deletions (sorted by Virus Name): Virus Name Infection Type Date removed ---------- -------------- ------------ Adware.ClickDLoader File infector 08/05/04 Adware.Clickbank File infector 08/05/04 Adware.FavBarCash File infector 08/05/04 Backdoor.Pcclient File infector 08/05/04 Backdoor.Zincite.A File infector 08/05/04 Hacktool.Servu.Exploit File infector 08/05/04 PWSteal.Lemir.Kit File infector 08/05/04 Trojan.Corem File infector 08/05/04 Trojan.Fewest File infector 08/05/04 Trojan.Minit File infector 08/05/04 W32.Evaman.C@mm File infector 08/05/04 W32.Forder File infector 08/05/04 W32.Fugo File infector 08/05/04 W32.Gugom File infector 08/05/04 W32.Jerem File infector 08/05/04 W32.Kadar File infector 08/05/04 W32.Lovgate.AK@mm File infector 08/05/04 W32.Mota.B@mm File infector 08/05/04 W32.Myfip.A File infector 08/05/04 W32.Zepp File infector 08/05/04 Deletions (sorted by Date removed): Virus Name Infection Type Date removed ---------- -------------- ------------ Adware.ClickDLoader File infector 08/05/04 Adware.Clickbank File infector 08/05/04 Adware.FavBarCash File infector 08/05/04 Backdoor.Pcclient File infector 08/05/04 Backdoor.Zincite.A File infector 08/05/04 Hacktool.Servu.Exploit File infector 08/05/04 PWSteal.Lemir.Kit File infector 08/05/04 Trojan.Corem File infector 08/05/04 Trojan.Fewest File infector 08/05/04 Trojan.Minit File infector 08/05/04 W32.Evaman.C@mm File infector 08/05/04 W32.Forder File infector 08/05/04 W32.Fugo File infector 08/05/04 W32.Gugom File infector 08/05/04 W32.Jerem File infector 08/05/04 W32.Kadar File infector 08/05/04 W32.Lovgate.AK@mm File infector 08/05/04 W32.Mota.B@mm File infector 08/05/04 W32.Myfip.A File infector 08/05/04 W32.Zepp File infector 08/05/04 ********************************************************************** ** Additional Information ** ********************************************************************** Additional information regarding this virus definitions update can be found in UPDATE.TXT and TECHNOTE.TXT.