Norman SandBox technology has undoubtedly demonstrated its superiority over traditional antivirus solutions this week. This proactive virus protection engine has detected several new versions of Bagle and Mitglieder. Both of these malware components have been spammed out in large amounts and each and every one of them has been detected and stopped by Norman SandBox.

Four versions of Mitglieder (FK,FL,FN and FM) have been detected this week and all have been spread massively through emails affecting numerous countries. In short Mitglieder can cause damage by:

· Preventing access to certain web pages, in particular those belonging to antivirus companies
· Disabling system services related to several antivirus and security products
· Deleting Windows registry editing tools
Bagle.FN spreads in an email message that tries to trick users into believing that the message attachment is a computer program, images, etc. It also spreads via Internet, attacking IP addresses, obtained at random or from the infected computer’s network, exploiting vulnerability or through an open port.

Bagle.FN tries to download several files from different websites in order to run them on the computer, and deletes Windows registry entries associated with other malware speciments.

While other traditional antivirus vendors have had to release new detection files every day, Norman can safely protect its customers by knowing that the SandBox stops all the malicious files. With Norman SandBox there is no need to wait for the release of signature files that can stop the malware. Norman SandBox stops the malware before it has a chance to enter your computer system.