Unique Computer Virus Can Be Continually Updated by Virus Writer From Central Location; Symantec Detects W95.Babylonia Computer Virus that Disguises Itself as a Y2K Fix.

CUPERTINO, Calif.--(BUSINESS WIRE)--December 7, 1999--

W95.BABYLONIA Y2K VIRUS DESCRIPTION:

--   A new Y2K virus has been discovered that disguises itself as a
     Y2K fix - the virus was discovered on December 6, 1999.

--   The virus is unique - it has the ability to download the viral
     components of the virus from the Internet. When the virus is
     executed, the virus will wait for an Internet connection. When it
     detects that the computer can access the Internet, it will
     download several files from a web server in Japan. Because the
     virus has such capability, it is possible for the virus writer to
     update the virus centrally.

--   W95.Babylonia is a very complex virus that propagates mainly to
     other computer users via MIRC. MIRC is a text based communication
     application used to chat over the Internet. When an infected user
     logs onto MIRC, it will automatically send the virus to everyone
     within the same MIRC chat room as the infected user. The virus
     will be sent as a Y2K bug fix. Once this file (Y2K bug fix) is
     executed, it will infect other 32-bit EXE program files and also
     Windows Help files.

--   SARC currently has approximately 20 submissions of the virus from
     customers and believes the virus to be spreading quickly
     worldwide.

--   The virus was written by the 29A virus writing group.


CHARACTERISTICS OF INFECTION:

     The virus will try to modify an infected system to display the
following message when the computer is booted:

     W95/Babylonia by Vecna (c) 1999

     Greetz to RoadKil and VirusBuster

     Big thankz to sok4ever webmaster

     Abracos pra galera brazuca!!!

     ---

     Eu boto fogo na Babilonia!


     The virus will also send an email to
`[e-mail]' to track infected computers.

VIRUS RATING: Medium/High Risk

SYMANTEC ANTIVIRUS RESEARCH CENTER (SARC):

SARC is one of the industry's largest dedicated team of virus experts. With offices located in the United States, Japan, Australia, and the Netherlands, the sun never sets on SARC. The center's mission is to provide swift, global responses to computer virus threats, proactively research and develop technologies that eliminate such threats, and educate the public on safe computing practices. As new computer viruses appear, SARC develops identification and detection for these viruses, and provides either a repair or delete operation, thus keeping users protected against the latest virus threats.

SYMANTEC:

Symantec is a world leader in Internet security technology and technology solutions that help companies manage and support workforces that use laptop computers and other mobile devices.

The company is a leading provider of software products for the consumer market and is rapidly growing its presence as a provider of solutions to enterprise organizations.