USER ALERTS

Anti-Virus Update Contains Unscreened Virus  
Published Wednesday, October 8, 2003

 Scams and eMail Frauds

 Area Code 809

 eBay Spoofing

 Microsoft Spoofing

 Symantec Spoofing

 Bank Spoofing

 Netslinger Home Page
 

If you receive an eMail from Symantec or other Anti-Virus vendor that claims to contain an upgrade or patch to your Anti-Virus software, delete it.  It contains a retro virus designed to take control of your computer.  At the time this notice was published the virus was not included in Symantec's virus definition list.  Following is the response I got from them which indicates that the virus does unrepairable damage.  This just goes to show that anti-virus software, a firewall and keeping your system up-to-date is not good enough to keep it clean.  If you system has contact with the outside world you run the risk of infection no matter what you do.  So you better do full backups including your system configuration and do them regularly.  
 

Date: October 7, 2003

David James
Cybertron, Inc.
5825 Glenridge Drive
Building 3, Suite 250
Atlanta  GA 30328


Dear David James,

We have analyzed your submission.  The following is a report of our
findings for each file you have submitted:

filename: C:\Documents and Settings\David\My Documents\Viruses\nav32.exe
machine: CYBERTOSHIBA
result: This file is infected with W32.IRCBot.B

Developer notes:
C:\Documents and Settings\David\My Documents\Viruses\nav32.exe is
non-repairable threat.  NAV with the latest beta definition detects this.
Please delete this file and replace it if neccessary.  Please follow the
instruction at the end of this email message to install the latest beta
definitions.

Symantec Security Response has determined that the sample(s) that you
provided are infected with a virus, worm, or Trojan. We have created beta
definitions that will detect this threat. Please follow the instruction at
the end of this email message to download and install the latest beta
definitions.
Downloading and Installing Beta Definition Instructions:
1. Open your Web browser. If you are using a dial-up connection, connect to
any Web site, such as:  http://securityresponse.symantec.com/
2. Click this link to the ftp site:
ftp://ftp.symantec.com/public/english_us_canada/
antivirus_definitions/norton_antivirus/beta/symcbetadefsi32.exe. If it does not go to the site (this
could take a minute or so if you have a slow connection), copy and paste the
address into the address bar of your Web browser and then press Enter.
3. When a download dialog box appears, save the file to the Windows desktop.
4. Double-click the downloaded file and follow the prompts.
----------------------------------------------------------------------
This message was generated by Symantec Security Response automation

Should you have any questions about your submission, please contact
our regional technical support from the Symantec website
(http://www.symantec.com/techsupp/)
and give them the tracking number in the subject of this message.



--------------------------------------------