==========================================================================
FEB96C.TXT - What's New in the NAV Definition Update
Symantec AntiVirus Research Center
February 9, 1996
==========================================================================

=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*
*                         SPECIAL ANNOUNCEMENT                             *
*                   NAV Detects & Repairs the Boza virus                   *
=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*

    This release of the Virus Definition Set enables the Norton AntiVirus
    to detect and repair "Boza", the first virus to specifically target
    the Windows '95 operating system.

=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*
*                         SPECIAL ANNOUNCEMENT                             *
*              NAV Detects & Repairs MS Word Macro Viruses                 *
=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*

    This release of the Virus Definition Set also enables the Norton
    AntiVirus to scan and repair MS Word documents infected with
    macro viruses & trojan Horses.

IMPORTANT:  If your version of Norton AntiVirus is dated before December 
            1, 1995, you will need to update it using the NAV Macro 
            Engine Update in order to use these virus definitions. If you
            have not updated your version, download the NAV Macro Engine 
            Update from the Symantec BBS, CompuServe, America Online, 
            Microsoft Network, or Internet (FTP and WWW). The file is 
            called UPDATEME.EXE for NAV 3.0 or NAV95PCH.EXE for NAV for 
            Windows 95. They can be downloaded from where the monthly 
            update files are normally found.

            This update is available only for download.

==========================================================================

Virus Alerts

  Ten most commonly reported viruses (worldwide):

      AntiEXE                       Boot infector
      Stoned.Empire.Monk            Boot infector
      Form.A                        Boot infector
      Concept                       MS Word macro infector
      NYB                           Boot infector
      Junkie                        Boot infector
      Stealth_Boot.B                Boot infector
      Ripper                        Boot infector
      Sat_Bug.Natas                 Boot and file infector
      Da'Boys                       Boot infector

  Be on alert for the following viruses in the following areas:

      3b Trojan                     Public Access sites
      Cascade.1701.A                Europe
      Concept                       Attachments to electronic mail
      Gold Trojan (AOL Gold)        Public Access sites
      Frodo.Frodo.A                 Europe
      HD Trojan                     Public Access sites
      Junkie                        Europe, Asia and Australia
      Keypress.1232.A               US and Australia
      One_Half                      Europe
      Sat_Bug.Natas                 Central and South America
      Urkel                         Eastern US
      Vienna.BUA.2263               Internet FTP sites
      Yankee Doodle.TP-44.A         Europe and US

Changes Incorporated Into This Update
  New:

    **SPECIAL ADDITION**
    
      Boza                          Windows '95 file infector
      HD Trojan                     Trojan

      4on (3)                       File infector
      Ache.338                      File infector
      Air_Raid.1730 (2)             File infector
      Alive.3400 (2)                File infector
      Alive.3400 (3)                File infector
      Alive.3400 (4)                File infector
      ARCV.Payback                  Boot infector
      ARCV.Payback Dropper          Dropper
      Arianna.2864                  File & boot infector
      Arianna.2864 (b)              File & boot infector
      Arianna.2864 (b3)             File & boot infector
      Ash.743.C                     File infector
      Ash.743.D                     File infector
      Ash.743.G                     File infector
      Ash.743.H                     File infector
      Ash.743.I                     File infector
      Ash.743.K                     File infector
      Bob.448                       File infector
      Bobo.1355 (1)                 File infector
      Bobo.1355 (2)                 File infector
      Bobo.1355 (3)                 File infector
      BW.525                        File infector
      BW.A                          File infector
      BW.Factit (2)                 File infector
      BW.Factit (3)                 File infector
      BW.Snowbird.1272 (2)          File infector
      Caustic.601                   File infector
      ChinaBomb                     File infector
      Chips                         File infector
      Companion (1)                 File infector
      Companion (2)                 File infector
      Crazy_Lord.Ming               File infector
      CSF.240 (2)                   File infector
      Cybercide.2299b               File infector
      Dark_Avenger.2000             File infector
      Demo1 (1)                     File infector
      Demo1 (2)                     File infector
      DenZuk 2 (b)                  Boot infector
      DIR-II.1024.E                 File infector
      DIR-II.AF                     File infector
      DIS.1552                      File infector
      Dream (2)                     File infector
      Dream (3)                     File infector
      Ebola.3000 (2)                File infector
      Egg.833                       File infector
      Equals                        File infector
      Explorer.3037                 File infector
      Fasolo.176                    File infector
      Father_Mac.306.B              File infector
      Fax_Free.1024.C               File infector
      Fax_Free.1024.C (2)           File infector
      Flying.633                    File infector
      Fusebox.d                     File infector
      GM.365                        File infector
      Golgi.467                     File infector
      Gotc-Mut3 (d)                 File infector
      GreenPeace Trojan             Trojan
      Hi.460.B                      File infector
      HLL.4109 (2)                  File infector
      HLL.4629 (2)                  File infector
      HLL.Antiline                  File infector
      HLL.Kasienka                  File infector
      HLL.Kasienka (2)              File infector
      HLLC.Dope.5129 (2)            File infector
      HLLC.Unvisible (1)            File infector
      HLLC.Unvisible (2)            File infector
      HLLC.Unvisible (3)            File infector
      HLLO.3008 (2)                 File infector
      HLLO.3008 (3)                 File infector
      HLLO.8304                     File infector
      HLLP.Xmas.6888 (2)            File infector
      HLLP.Xmas.6888 (3)            File infector
      Hnyslov                       File infector
      Holiday.3000                  File infector
      Holiday.3000 (x)              File infector
      IamV (2)                      File infector
      IamV (3)                      File infector
      Incom (d)                     File infector
      Incubus                       Boot infector
      Incubus dropper               Dropper
      Infector.1059                 File infector
      Infector.1175                 File infector
      Infector.1500                 File infector
      Infector.1548                 File infector
      Infector.178                  File infector
      Infector.245                  File infector
      Infector.289                  File infector
      Infector.355                  File infector
      Infector.642                  File infector
      Infector.888                  File infector
      Infector.96                   File infector
      Infector.Demo.855             File infector
      Inky (b)                      Boot infector
      Int AA (b)                    Boot infector
      IntFF                         File infector
      IntFF (x)                     File infector
      IQ                            File infector
      IVP.200                       File infector
      IVP.Anxiety                   File infector
      IVP.Gwynned                   File infector
      IVP.Replico.317               File infector
      IVP.Replico.350               File infector
      IVP.Replico.352               File infector
      IVP.Replico.390               File infector
      Ivy.454                       File infector
      J&M (b)                       Boot infector
      Kudeptsa.357                  File infector
      Kuz.200                       File infector
      Ky                            File infector
      Kyokushinkai.2048.A           File infector
      Kyokushinkai.2k.A (b)         File & boot infector
      Kysia.3072.a                  File & boot infector
      Kysia.3072.a (b)              File & boot infector
      La_la                         File infector
      Legozz                        File infector
      Leprosy.6820                  File infector
      Leprosy.6820 (2)              File infector
      Leprosy.6820 (3)              File infector
      Little_Girl.985               File infector
      Lovechild.2710 (2)            File & boot infector
      Lyceum.1950                   File infector
      MacGyver 3.0                  File infector
      Malmsey                       File infector
      March_6th                     File infector
      Mephisto.1020                 File infector
      Mephisto.510                  File infector
      MGTU.273.C                    File infector
      Milan.Vivisex                 File infector
      Ming (d)                      File infector
      Mite                          File infector
      MtE.Liquid                    File infector
      MTZ.2624 (2)                  File infector
      MTZ.2624 (3)                  File infector
      MTZ.2624 (4)                  File infector
      MTZ.2624 (5)                  File infector
      Multiflu.791                  File infector
      Murphy.1659                   File infector
      Murphy.1752                   File infector
      Murphy.Napalm                 File infector
      Mutagen.1_10.B (1)            File infector
      Mutagen.2268 (2)              File infector
      Neither                       File infector
      Newboot                       Boot infector
      NoBootEXE.396                 File infector
      NoKernel (b2)                 File & boot infector
      NoKernel (b3)                 File & boot infector
      November 17.864               File infector
      November 17.864 (x)           File infector
      Number1.b (d)                 File infector
      Otti.932                      File infector
      Ox.475 (1)                    File infector
      Ox.475 (2)                    File infector
      Peter (b1)                    Boot infector
      Peter (b2)                    Boot infector
      Ping.B Dropper                Dropper
      Polifemo.736                  File infector
      PS-MPC.321                    File infector
      PS-MPC.388                    File infector
      PS-MPC.510                    File infector
      PS-MPC.Doggy                  File infector
      PS-MPC.McWhale (1)            File infector
      PS-MPC.McWhale (2)            File infector
      PS21                          File infector
      PS22                          File infector
      Quadratic.981                 File infector
      Quish.397                     File infector
      Quiver                        Boot infector
      Radyum.586                    File infector
      Range.290                     File infector
      Ranger                        File infector
      Raptor.B (2)                  File infector
      Rasek.1489 (2)                File & boot infector
      Ratboy.513                    File infector
      Rauser.250                    File infector
      Realize                       File infector
      Riihi.258                     File infector
      Rubbit.3164 (1)               File infector
      Rubbit.3164 (2)               File infector
      Scratch.374                   File infector
      Scratch.374 (x)               File infector
      Seat (2)                      File infector
      Seventh                       File infector
      Shutdown.698                  File infector
      Sign.615                      File infector
      SillyC.122                    File infector
      SillyC.122.B                  File infector
      SillyC.190.B                  File infector
      SillyC.190.B (2)              File infector
      SillyC.553                    File infector
      SillyCR.122.B                 File infector
      SillyCR.125                   File infector
      Simplex.507                   File infector
      Sister.792                    File infector
      Small_comp.100                File infector
      Sofia.432                     File infector
      Stoned.Mphti                  Boot infector
      Stoned.Mphti Dropper          Dropper
      Suriv_1.1000 (2)              File infector
      Swas                          File infector
      Switch                        File infector
      TB1 (2)                       File infector
      Tease.840                     File infector
      Tequila.2469 (1)              File & boot infector
      Tequila.2469 (2)              File & boot infector
      Tequila.2469 (b)              Boot infector
      Tequila.2469 (Gen1)           File & boot infector
      Traveller_Jack.1008           File infector
      Trident.647 (2)               File infector
      Trivial.84 (2)                File infector
      Trivial.85                    File infector
      Trivial.FTW.101               File infector
      Trivial.FTW.192               File infector
      Trojan.Bruces.GF (1)          Trojan
      Trojan.Bruces.GF (2)          Trojan
      Trojan.Bruces.GF (3)          Trojan
      TS.1200                       File infector
      Undershove.439                File infector
      Unique.308                    File infector
      Unlucky.2008 (2)              File infector
      Unlucky.2008 (3)              File infector
      V3res Trojan                  File infector
      Vampiro.1000.B                File infector
      VCCa                          File infector
      VCL.341.F                     File infector
      VCL.355.F                     File infector
      VCL.356 (2)                   File infector
      VCL.407.F                     File infector
      VCL.455                       File infector
      VCL.513                       File infector
      VCL.Mut.455                   File infector
      VCLb                          File infector
      Vdead.2316                    File infector
      Vien.Violator.779             File infector
      Vienna.644.A                  File infector
      Vienna.689                    File infector
      Vienna.923                    File infector
      Vienna.W-13.318               File infector
      Vlad.2042                     File infector
      Vlad.2042 (x)                 File infector
      Vlad.651                      File infector
      Vlad.655                      File infector
      VLamiX.1090                   File infector
      Voronezh.600 (2)              File infector
      World Peace (b)               File & boot infector
      WW.254.A                      File infector
      Yankee.XPEH.5648 (2)          File infector
      YB.426.B                      File infector
      Zelentsov                     File infector
      Zipper                        File infector
      Zipper (x)                    File infector


Changes to previous definitions:


      Concept (macro virus)         Repair added
      Nuclear (macro virus)         Repair added
      Colors  (macro virus)         Repair added
      DMV     (macro virus)         Repair added
      FormatC (macro virus)         Repair added

      Austr_Parasite.254            Renamed to Austr_Parasite.254 (2)
      Commander Bomber              Renamed to Commander Bomber (2)
      Demo1                         Removed
      Gollum                        Renamed to Gollum (2)
      Infector.                     Removed
      IVP.Manifesto.679             Renamed to IVP.Manifesto.679 (2)
      IVP.Mandela.676               Renamed to IVP.Mandela.676 (2)
      K-Hate                        Renamed to K-Hate (2)
      Kak                           Renamed to Kak (2)
      KELA.1171                     Renamed to KELA.1171 (2)
      Lemming.2146                  Renamed to Lemming.2146 (2)
      Leprosy                       Renamed to Leprosy (2)
      NRLG                          Renamed to NRLG (2)
      PS-MPC.Mc2                    Removed
      Shizol                        Renamed to Shizol (2)


* Please read the file VIRSPEC.TXT for special instructions pertaining to
  some specific virus repairs.

