SUNNYVALE, Calif., Dec. 31 /PRNewswire-FirstCall/ -- SonicWALL, Inc. , a leading provider of network, Web, email security and backup and recovery solutions, has deployed early protection against a rapidly proliferating variant of the Nuwar worm, which is spreading via emails containing seasonal greetings in the subject line. The rate of infection has picked up rapidly over the past eight hours, and seems set to become one of the biggest threat outbreaks of the year.
Once a computer is infected, it looks for open mail proxies and begins sending email to infect other computers. The mass-mailing worm is already moving quickly across the Internet, installing multiple codes on victims' computers and then protecting them with rootkit. Users of SonicWALL's Unified Threat Management technology, which protects against viruses, Trojans, worms and other threats and vulnerabilities, today automatically received updated signatures designed to repel the Nuwar worm.
The worm spreads via email, in most cases with the subject line "Happy New Year!" containing attachments typically named as one of the following: "Greeting Card.exe", "Greeting Postcard.exe", "Postcard.exe", "greeting card.exe", "greeting postcard.exe", or "postcard.exe". Upon execution, the worm attempts to disable running Anti-Virus processes and drops a Tibs Trojan on the infected computer system. Subsequently, the worm tries to download additional malicious code from the remote website.
During propagation, the worm sends a copy of itself by using its own SMTP engine to the email addresses found in the address book of the infected PC. In some instances, the worm sends a malformed executable copy (i.e. containing an incorrect executable header) that could be considered harmless and can simply be treated as SPAM email.
Very early samples of this variation on the Nuwar worm were first discovered in the wild on December 29th, 2006. On December 30th SonicWALL issued the following signatures designed to protect against this threat:
Gateway Anti-Virus Signatures
---------------
Nuwar.B (Worm)
Nuwar.C (Worm)
Intrusion Prevention Signatures
---------------
VIRUS Greeting Card.exe attachments 1 (SID: 1051)
VIRUS Greeting Card.exe attachments 2 (SID: 1052)
VIRUS Greeting Card.zip attachments 1 (SID: 1053)
VIRUS Greeting Card.zip attachments 2 (SID: 1054)
About SonicWALL, Inc.
Founded in 1991, SonicWALL, Inc. designs, develops and manufactures comprehensive network security, email security, secure remote access, and backup and recovery solutions. SonicWALL is headquartered in Sunnyvale, California and trades on the NASDAQ under the symbol SNWL. For more information, contact SonicWALL at +1 (408) 745-9600 or visit the company web site at http://www.sonicwall.com/.
Safe Harbor Regarding Forward-Looking Statements
Certain statements in this press release are "forward-looking statements" within the meaning of the Private Securities Litigation Reform Act of 1995. The forward-looking statements include but are not limited to statements regarding our ability to deliver gateway anti-virus, anti-spyware and intrusion prevention signatures on a continual basis and our ability to defend against new and existing Internet attacks and exploits. These forward-looking statements are based on the opinions and estimates of management at the time the statements are made and are subject to certain risks and uncertainties that could cause actual results to differ materially from those anticipated in the forward-looking statements. In addition, please see the "Risk Factors" described in our Securities and Exchange Commission filings, including our Annual Report on Form 10-K for the year ended December 31, 2005, for a more detailed description of the risks facing our business. All forward-looking statements included in this release are based upon information available to SonicWALL as of the date of the release, and we assume no obligation to update any such forward-looking statement. All forward-looking statements included in this release are based upon information available to SonicWALL as of the date of the release, and we assume no obligation to update any such forward-looking statement.
NOTE: SonicWALL is a registered trademark of SonicWALL, Inc. Other product and company names mentioned herein may be trademarks and/or registered trademarks of their respective companies.
