This is an Aspack-compressed email worm (Aspack, is used to take any executable file and compress it into a smaller file), it also spreads over network connections.

Information in the subject field of the email is randomly chosen based on existing emails. The body texts are; “I'll try to reply as soon as possible", “Take a look to the attachment and send me your opinion!"

The attachments appear with several different names, e.g. “SETUP.EXE", “searchURL.exe".. To populate the worm replies to any email addresses it finds in Outlook and Outlook Express’ in-boxes and sendsitself. When it infects a host a Trojan is installed trying to open for remote access. Norman’s customers have been protected since Monday, February 24, from the Lovgate.B@mm

We will continue to follow the current situation carefully.

Users are encouraged to update their Norman Virus Control protection to the most recent version. For more detailed Information about this threat visit: www.norman.com

For further information, please contact

Norman ASA, VP Marketing Audun Lødemel, tel.+47 67 10 97 79, mob. +47 93 44 65 31