Symantec (Norton Anti-virus)Provides Fix Tool for Fast-spreading VBS.STAGES.A Worm ================================================================ CUPERTINO, Calif.---June 20, 2000--Symantec has developed a tool to remove the changes to a computer system caused by VBS.STAGES.A, a new, fast-spreading polymorphic computer worm. Available at www.symantec.com/avcenter/venc/data/fix.vbs.stages.html, this tool removes VBS.STAGES.A infections from computers running on Windows 95/98, Windows NT and Windows 2000 systems. "We are pleased to offer a tool that provides a fast, automated recovery process from damage caused by VBS.STAGES.A," said Sanjiv Bhargava, vice president of Symantec's CORE Technology Division. "The Symantec Anti-Virus Research Center (SARC) recommends using this tool in combination with an anti-virus solution such as Norton Anti-Virus to ensure continued protection against malicious threats." Users can verify the digital signature in Symantec's VBS.STAGES.A tool at www.symantec.com/avcenter/venc/data/fix.vbs.stages.html to ensure that the tool is legitimate in case they receive it via e-mail. Norton AntiVirus users can download the definitions through Symantec's LiveUpdate feature and from the Symantec Web site at www.symantec.com/avcenter/download.html. VBS.STAGES.A VBS.Stages.A spreads itself like VBS.LOVELETTER.A, sending mail to a users' entire MS Outlook address book with a randomly generated subject line, which can overload mail servers. Additionally, the worm spreads itself via ICQ, mIRC and PIRCH and copies itself to mapped drives. The subject line may be one of 12 combinations and in some cases begins with "FW." The subject line will contain either "Life stages," "Funny" or "Jokes" or several combinations of these. This worm immediately deletes copies of the sent emails to ensure there is no record of its presence. ############################################################## TechNet Mail List provided as a free service by IPC using LISTSERV 1.8c ############################################################## To subscribe/unsubscribe, send a message to [log in to unmask] with following text in the body: To subscribe: SUBSCRIBE TECHNET <your full name> To unsubscribe: SIGNOFF TECHNET ############################################################## Please visit IPC web site (http://www.ipc.org/html/forum.htm) for additional information. If you need assistance - contact Keach Sasamori at [log in to unmask] or 847-509-9700 ext.5315 ##############################################################