PDA

View Full Version : Win32:Netsky-B [Wrm


paulyoung666
20-02-2004, 09:03
is anyone else getting hammered to death by this , i have had summat like 10 of these virus today already :( , sorry if this has been covered , i looked but could not see :D

Stuartbe
20-02-2004, 09:05
is anyone else getting hammered to death by this , i have had summat like 10 of these virus today already :( , sorry if this has been covered , i looked but could not see :D

Nice one for the heads up m8....

Its newly discovered and has yet to be given a threat rating !

http://www3.ca.com/virusinfo/

http://www3.ca.com/virusinfo/virus.aspx?ID=38332

gary_580
20-02-2004, 09:07
Yes, my employers had it on one of their servers Wednesday night. We have all sorts of firewalls and antio virus running too

Florence
20-02-2004, 09:07
is anyone else getting hammered to death by this , i have had summat like 10 of these virus today already :( , sorry if this has been covered , i looked but could not see :D
I had one to my ispreview addy but the server deleted the attachment before I got the email. I have added a copy of the email from Nortons. My email had greeting in the subject and an attachment.

Virus Warning!
W32.Netsky.B@mm - Category 4 Virus

Symantec has upgraded the W32.Netsky.B@mm to a Level 4 threat [On a scale of 1-5, 5 being highest].

W32.Netsky.B is a mass-mailing worm that uses its own SMTP engine to send itself to email addresses it finds when scanning the hard drives and mapped drives. This may clog mail servers or degrade network performance. It also searches drives C through Z for folder names containing "Share" or "Sharing," and then copies itself to those folders.

Identifiable Characteristics of email:

From: (spoofed)
Subject: read it immediately
Body: information about you
Attachment: story.com

With the newly found mass-mailing worm, W32.Netsky.B@mm, Symantec advises customers to protect the network and update the definition file of all the Symantec AntiVirus solutions, using LiveUpdate and Intelligent Updater.

paulyoung666
20-02-2004, 09:10
well all i can say is avast antivirus is the dogs ******** , cant remember who pointed me to it but i am damn glad they did :) :)

danielf
20-02-2004, 10:10
is anyone else getting hammered to death by this , i have had summat like 10 of these virus today already :( , sorry if this has been covered , i looked but could not see :D

I had about 20 since yesterday morning on my work account. So, You're not not the only one... :(

paulyoung666
20-02-2004, 10:13
I had about 20 since yesterday morning on my work account. So, You're not not the only one... :(



yeah me and are not alone i suspect , rating it as a 4 , it must be pretty serious , another mydoom in the making methinks :(

Mal
20-02-2004, 10:38
I'd just got the new virus definitions from norton last night for it, then checked my email and it found a virus. Talk about timing.

iadom
20-02-2004, 10:53
yeah me and are not alone i suspect , rating it as a 4 , it must be pretty serious , another mydoom in the making methinks :(This one deletes MyDoom registry enties if it finds any.
I had one yesterday from xxxxx@enfield.gov.uk.

http://www.authentium.co.uk/threats/netsky.cfm

paulyoung666
20-02-2004, 12:44
This one deletes MyDoom registry enties if it finds any.
I had one yesterday from xxxxx@enfield.gov.uk.

http://www.authentium.co.uk/threats/netsky.cfm


wonder if it really was a govt dept or spoofed :(

paulyoung666
24-02-2004, 16:55
is anyone still getting these , i seem to be getting them every 5 bluddddddddy minutes :(
i forgot to turn my volume down after listening to some music and as anyone who has avast antivirus knows , you get a siren noise when i got one , nearly jumped out of my sodding skin :D :D :D

Stuartbe
24-02-2004, 16:56
is anyone still getting these , i seem to be getting them every 5 bluddddddddy minutes :(
i forgot to turn my volume down after listening to some music and as anyone who has avast antivirus knows , you get a siren noise when i got one , nearly jumped out of my sodding skin :D :D :D

:LOL: Did you hit the celing ?

paulyoung666
24-02-2004, 16:57
:LOL: Did you hit the celing ?



i was like a bluddddddy cartoon cat with my claws dug into the plaster :rofl: :rofl: :rofl:

Stuartbe
24-02-2004, 16:58
LOL - Are they all coming from the same address or are they spoofed ?

paulyoung666
24-02-2004, 16:59
LOL - Are they all coming from the same address or are they spoofed ?




havent really checked , they seem to be from different sources , if i remember i will check the headers next time and have a look :)

allanprg
24-02-2004, 16:59
Nope haven't had this virus at all. :no: Keeping fingers crossed. :ninja:

allanprg
24-02-2004, 17:03
Also Norton anti-virus updated yesterday. So helping to keep the yukky thing at bay. :)

Paul
24-02-2004, 17:11
I got three or four copies on the first day (20th) - nothing since then.

Broc
25-02-2004, 13:56
I am getting 2 or 3 W32.Netsky.B@mm for the last few days.

Most but not all are from a similar but different address.

graham@counter2.sextracker[2].txt
graham@vad.mainentrypoint[1].txt
graham@ads.specificpop[2].txt
graham@counter7.sextracker[1].txt
they seem in a odd format and it also seems odd that they are so similar :confused:

Paul
25-02-2004, 16:28
Those look like cookie names

TezmitcH
25-02-2004, 18:01
Just had 4 of these myself today. NAV 2003 picked them up and deleted the attatchments straight away. I was just thinking "thank god I haven't had any Novarg/Mydoom lately" then this starts.

Some people have far too much time on their hands. Or is it the old conspiracy theorists favourite where the AV companies create them to sell their software. Personally I'm just tired of getting virii sent to me. :mad:

Tez

Broc
25-02-2004, 21:47
Those look like cookie names
Thatâ₠¬Ã¢â€žÂ¢s what's in the email properties as the sender address. Can anyone shed any light on why this would be, is it the way the virus works or is someone sending it to me and disguising their address.:confused:

Sipowicz
25-02-2004, 22:25
I've had about 12 in the last week! Norton has killed them for me!

paulyoung666
26-02-2004, 08:19
10 this morning alone :(