jimv7 19:46 02 Mar 2004

Email from A2(A squared)click here

Worm.Win32.NetSky.D Alert!

If you can hear a beep melody between 6 and 9 am this morning, then your computer has been infected with the NetSky.D worm.

This new worm only spreads via email attachments. The attachment filename is randomly choosen but always ends with .PIF.

The subject is one of the following lines:

"Re: Re: Document"
"Re: Re: Thanks!"
"Re: Thanks!"
"Re: Your document"
"Re: Here is the document"
"Re: Your picture"
"Re: Re: Message"
"Re: Hi"
"Re: Hello"
"Re: Re: Re: Your document"
"Re: Here"
"Re: Your music"
"Re: Your software"
"Re: Approved"
"Re: Details"
"Re: Excel file"
"Re: Word file"
"Re: My details"
"Re: Your details"
"Re: Your bill"
"Re: Your text"
"Re: Your archive"
"Re: Your letter"
"Re: Your product"
"Re: Your website"

When the file is started, the worm installs itself on your PC to get activated each system startup. It also tries to deactivate installed antivirus software.

It seaches the harddisk for email addresses which are used to spread itself.

A more detailled analysis of the worm can be found in the a² Malware Database:
click here

Netsky.D can be detected and removed with a² with the latest signature updates loaded. The a² background guard blocks the worm immediately if it is started.

  loughlan 20:40 02 Mar 2004

On our two PC's with seperate adresses we counted 7 attacks from Netsky.D this morning. Our AVG software eliminated the first, so the subsequant arrivals were identified immediatly and deleted.

  bretsky 23:11 02 Mar 2004

Thanx for the warning....Oh the joys of computing!!!!!!!!!!!!!!!!!!????????????


This thread is now locked and can not be replied to.

Elsewhere on IDG sites

WPA2 hack: How secure is your Wi-Fi?

Add Depth Of Field to a photo using Tilt Shift Blur in Photoshop

iPhone tips & tricks

Comment afficher des fichiers cachés sur Mac ?