The new worm NetSky.M was detected by Norman SandBox like the previous worms NetSky.B, Bagle.B and MyDoom.B. This means that users of Norman Virus Control were protected from this threat even before new virus signature files were published.

The Internet worm NetSky.M is - as of this writing - the latest version of the series of NetSky worms distributed on the Internet during a very active period of worm attacks. This variant was detected and removed by Noman SandBox - a technology detecting dangerous code before virus signatures have been released. The increased activities lately from malicious programs may look like an ongoing war between different virus writers fighting each other. One side effect of this "war" is that innocent bystanders - end users and organizations - are getting loads of infected emails.

The virus war seems to have started late January.

The worm MyDoom generated the first round of attacks causing massive global disruption. The next to follow was the worms Bagle and NetSky. Common for all these was they were containing messages to the rival worm writers. The worms contained strings like: "be aware! Skynet.cz - -->AntiHacker Crew<--" (Netsky.D).

Norman Data Defense Systems mission is to protect its customers as efficient and fast as possible. The traditional way of doing this is by releasing signature-based virus protection as soon as possible after an outbreak. This, of course, is a reaction to an unidentified virus or worm that has already had some time to circulate before a signature is released to stop it.

The goal in the war against these damaging activities should be to be pro-active - stop the malware before it hits any user. Norman SandBox technology is a pro-active technique stopping new and unknown viruses, worms and Trojans.
The increase of new attacks seen on the Internet shows the importance and need for this kind of protection.

Norman Data Defense Systems will continue to increase the Sandbox’s ability to detect new malware, to continuously protect users of Norman’s security programs in the best possible way!

Contact information

Steinar Wigtil, Director of R&D, Norman Data Defense Systems ASA,
Telephone +47 67 10 97 00, mobile phone +47 41 53 97 29

Audun Lødmel, Marketing, Norman Data Defense Systems ASA,
Telephone +47 67 10 97 79, mobile phone +47 93 44 65 31