[Merged] Netsky Virus
 

a new variant of the netsky virus, version D, is set to to clog up more inboxes according to security firm sophos.

http://www.sophos.com/virusinfo/anal...32netskyd.html


also freshly out on the net, the new beagle variants.

W32.Beagle.C@mm

http://securityresponse.symantec.com...agle.c@mm.html

W32.Beagle.E@mm

http://securityresponse.symantec.com...agle.e@mm.html

W32.Beagle.F@mm

http://securityresponse.symantec.com...agle.f@mm.html

W32.Beagle.G@mm

http://securityresponse.symantec.com...agle.g@mm.html

Re: sophos warns of beagle, and also netsky variants on the net.
 

good heads up my mate , i am still getting loads of netsky-b attacks :fit:

Re: sophos warns of beagle, and also netsky variants on the net.
 

Thanks for that m8...... :)

EDIT - You like that smiley dont you Paul :D

Re: sophos warns of beagle, and also netsky variants on the net.
 

My AV software, which no one has heard of,:cry: has updated its deffiles twice today.:)

Re: sophos warns of beagle, and also netsky variants on the net.
 

oh yes me does , and i have had a couple of netsky-d ' s just now :fit:

Re: sophos warns of beagle, and also netsky variants on the net.
 

Well - my firewall log is full of nastys trying to get in.....

I dont have that problem with email though. Only .zip files are allowed in - amd only if they can be opened and scanned by the mail server..... :)

W32.Netsky.D@mm
 

Hi all, Outlook has just downloaded this email as spam but found this virus.

Symantec Security Response

Not a good one. Im doing a virus scan as we speak.

REMEMBER: Update you virus definations.

WNA

Re: W32.Netsky.D@mm
 

you got the virus from symantec ?????????????? , or was it spoofed ??????????

Re: W32.Netsky.D@mm
 

it was spoofed. It wasn't from them.

Re: W32.Netsky.D@mm
 

had a feeling it might be , so did you get infected then ????????????

Re: W32.Netsky.D@mm
 

My AV, Command CSAV from Authentium, ( the one that Norton doesn't know about :rolleyes: ) Posted deffiles for this yesterday. It has auto updated the deffiles 4 times in the past 36 hours. The latest one about an hour ago, it related to W32/Bagle.I@mm As yet no reference to this can be found on the Symantec web site.:)
Checking deffiles would appear to be essential on a daily basis if you do not have "Auto update enabled" at the moment.

Re: W32.Netsky.D@mm
 

Yep.

Re: sophos warns of beagle, and also netsky variants on the net.
 

Stu, have just read this article, would your system protect against these zip files?
http://news.earthweb.com/ent-news/article.php/3319691

Re: W32.Netsky.D@mm
 

duplicate thread

http://forum.nthellworld.co.uk/showthread.php?t=8677

Re: W32.Netsky.D@mm
 

dont be so cruel and heartless , the poor lad has got an infection , he wants blankets and chicken soup :D :D :D :D , actually i was going to post the same but you beat me too it :rofl: :rofl: :rofl:



@ WNA have you got it sorted ??????????

Re: W32.Netsky.D@mm
 

I bet Kronas started that thread??? BTW i got it sorted.

Re: W32.Netsky.D@mm
 

Nooooooooooo dont open that email WNA....... Oh well - too late :D

Re: W32.Netsky.D@mm
 

Its sorted now anyway. Does anyone know to to import a blobked senders list from OE to Outlook?

Re: W32.Netsky.D@mm
 

I had that today and it put a file in my c:/windows dir called winlogon..

this couldnt be deleted and whenever running caused slow browsing and caused CPU usage to go up.

After removing it from msconfig i was able to remove with no probs..

Anyone with similar?

Re: W32.Netsky.D@mm
 

not seen that , mind you my a/v is picking them up so it isnt a problem , what a/v are you running ??????????????

Re: W32.Netsky.D@mm
 

norton updates every week, did liveupdate prior to going to work

Re: [Merged]Netsky Virus
 

Erm :shocking: I just got this I didn't even open the file :confused:

Re: [Merged]Netsky Virus
 

V :confused: I've ran a full system scan, turned off sys restore and am running the w.32netsky removal tool for the second time. Seems like a false alarm :shrug: or maybe it detected the one in quarentine.

Re: [Merged]Netsky Virus
 

Well I've had 16 sent to me at work - luckily the Council's wonderful up to date software detected them all!
(Yes I was surprised too! ;) )

Re: [Merged]Netsky Virus
 

Got Norton Securities 2004, on auto update and it has been catching this one on a regular basis (2 today!). Just got a return from a postmaster claiming that I had sent this damn virus!! And from my main user account!! Come to think of it, it has been playing up for ages, taking forever to download incoming mail with messages in Outlook saying something like "downloading 1 of 88. Time remaining 47 minutes" and I am on 600 service. Now I am confused, just done a forced scan and found no record of any virus(??)

Re: [Merged]Netsky Virus
 

Similar happened to me a couple of days ago from an address I'd never heard of and certainly wasn't in my contacts. Sure enough it came complete with its own copy of the Netsky B virus in the alleged returned mail. Damn SNEAKY :fit:

Re: [Merged]Netsky Virus
 

Hi Sipowicz

imo also run an alternative 'spyware' detector, as well as your Norton stuff - adaware, or spybot, for example:)

Re: [Merged]Netsky Virus
 

Thanks for the input, I have spybot and adaware running.

I had a notification at work today about this latest round of attacks. It described the very sort of message I got about being responsible for sending a virus. It is a technique the virus writers use, whereby they spoof the address of the sender from the address book of someone infected with the virus! I was not aware that they do this sort of thing!

On closer inspection of the postmaster notification, it seems that I "sent" the infected e-mail, whilst at work and with the home pc switched off!

Re: [Merged]Netsky Virus
 

Ouch! Nasty...........

Re: W32.Netsky.D@mm
 

Once a week is not enough, you should be able to set NAV to auto update. if not check every day for new deffiles. My AV from Command/Authentium CSAV has updated automatically 5 times in the past 48 hours.

Re: W32.Netsky.D@mm
 

same here with avast , updating all the time :eek: :eek: :eek:

Re: [Merged]Netsky Virus
 

Oi, 81.109.35.117 from Renfrew - do a virus scan!

Just received this email

Re: [Merged]Netsky Virus
 

Started getting a few of the B variant again, including one tonight from an IP which translates to cpc3-scun1-4-0-custxxx.nott.cable.ntl.com.

Does anyone know where this is ? The only place I can think of is Scun-thorpe, but that's a long way from Nottingham and I can't think of anyone in that area who would have my e-mail address.

Re: [Merged]Netsky Virus
 

I am getting loads of spoofed mails...

Actualy got one from bill.clinton@thewhitehouse.gov :rofl:

They expect me to open that ??????? Like I am going to know bill clinton :)

Re: [Merged]Netsky Virus
 

I'm sure he has heard of you, your "reputation" goes before you. :D

Re: [Merged]Netsky Virus
 

Yes - the sender was obviously spoofed - but the headers show it originated from the quoted source.

Re: [Merged]Netsky Virus
 

is anyone still getiing netsky viruses , i havent had any for ages , has ntl done something about this ??????????

Re: [Merged]Netsky Virus
 

Seems to be quieter here too but got a Netsky.P just yesterday. Perhaps the peeps with our addresses who are infected have finally done something about it.

Re: [Merged] Netsky Virus
 

I hadn't had any for a couple of weeks till Wednesday night then I got about a dozen, none since luckily. Tbh didn't notice whether they were "P" or not though :)