Symantec (Norton Anti-virus)Provides Fix Tool for Fast-spreading
VBS.STAGES.A Worm


================================================================
CUPERTINO, Calif.---June 20, 2000--Symantec has developed a tool
to remove the changes to a computer system caused by VBS.STAGES.A,
a new, fast-spreading polymorphic computer worm.
   Available at
www.symantec.com/avcenter/venc/data/fix.vbs.stages.html, this tool
removes VBS.STAGES.A infections from computers running on Windows
95/98, Windows NT and Windows 2000 systems.
   "We are pleased to offer a tool that provides a fast, automated
recovery process from damage caused by VBS.STAGES.A," said Sanjiv
Bhargava, vice president of Symantec's CORE Technology Division. "The
Symantec Anti-Virus Research Center (SARC) recommends using this tool
in combination with an anti-virus solution such as Norton Anti-Virus
to ensure continued protection against malicious threats."
   Users can verify the digital signature in Symantec's VBS.STAGES.A
tool at www.symantec.com/avcenter/venc/data/fix.vbs.stages.html to
ensure that the tool is legitimate in case they receive it via e-mail.
Norton AntiVirus users can download the definitions through Symantec's
LiveUpdate feature and from the Symantec Web site at
www.symantec.com/avcenter/download.html.

VBS.STAGES.A

   VBS.Stages.A spreads itself like VBS.LOVELETTER.A, sending mail to
a users' entire MS Outlook address book with a randomly generated
subject line, which can overload mail servers. Additionally, the worm
spreads itself via ICQ, mIRC and PIRCH and copies itself to mapped
drives. The subject line may be one of 12 combinations and in some
cases begins with "FW." The subject line will contain either "Life
stages," "Funny" or "Jokes" or several combinations of these. This
worm immediately deletes copies of the sent emails to ensure there is
no record of its presence.

##############################################################
TechNet Mail List provided as a free service by IPC using LISTSERV 1.8c
##############################################################
To subscribe/unsubscribe, send a message to [log in to unmask] with following text in
the body:
To subscribe:   SUBSCRIBE TECHNET <your full name>
To unsubscribe:   SIGNOFF TECHNET
##############################################################
Please visit IPC web site (http://www.ipc.org/html/forum.htm) for additional
information.
If you need assistance - contact Keach Sasamori at [log in to unmask] or
847-509-9700 ext.5315
##############################################################