[Merged] Netsky Virus

[paulyoung666]

Originally Posted by iadom

Once a week is not enough, you should be able to set NAV to auto update. if not check every day for new deffiles. My AV from Command/Authentium CSAV has updated automatically 5 times in the past 48 hours.

same here with avast , updating all the time

[altis]

Oi, 81.109.35.117 from Renfrew - do a virus scan!

Just received this email

**************** eManager Notification *****************

The following mail was blocked since it contains sensitive content.

Source mailbox: <**me**@ntlworld.com>
Destination mailbox(es): broome@paspaley.com.au
Policy: Attachment Removal
Attachment file name: document_full.pif - application/octet-stream
Action: Replaced with text

The Paspaley Pearls Group email system has detected that you have tried to send an email with an attachment that is not allowed on our network. It was not delivered to its intended reciepent . If this is in error, please notify antispam@paspaley.com.au

******************* End of message *********************



--------------------------------------------------------------------------------


Received: from paspaley.com.au (cpc2-ruth2-5-0-cust117.renf.cable.ntl.com [81.109.35.117])
by ppdwn-ux2.paspaley.com.au (8.12.5/8.11.2) with ESMTP id i24CIamf003396
for <broome@paspaley.com.au>; Thu, 4 Mar 2004 21:48:53 +0930
Message-Id: <200403041218.i24CIamf003396@ppdwn-ux2.paspaley.com.au>
From: **me**@ntlworld.com
To: broome@paspaley.com.au
Subject: Re: Here is the document
Date: Thu, 4 Mar 2004 12:11:54 +0000
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0012_000035A7.00002447"
X-Priority: 3
X-MSMail-Priority: Normal

Started getting a few of the B variant again, including one tonight from an IP which translates to cpc3-scun1-4-0-custxxx.nott.cable.ntl.com.

Does anyone know where this is ? The only place I can think of is Scun-thorpe, but that's a long way from Nottingham and I can't think of anyone in that area who would have my e-mail address.

[Stuartbe]

Originally Posted by pem

Started getting a few of the B variant again, including one tonight from an IP which translates to cpc3-scun1-4-0-custxxx.nott.cable.ntl.com.

Does anyone know where this is ? The only place I can think of is Scun-thorpe, but that's a long way from Nottingham and I can't think of anyone in that area who would have my e-mail address.

I am getting loads of spoofed mails...

Actualy got one from bill.clinton@thewhitehouse.gov

They expect me to open that ??????? Like I am going to know bill clinton

[iadom]

Originally Posted by stuartbe

I am getting loads of spoofed mails...

Actualy got one from bill.clinton@thewhitehouse.gov

They expect me to open that ??????? Like I am going to know bill clinton

I'm sure he has heard of you, your "reputation" goes before you.

Originally Posted by stuartbe

I am getting loads of spoofed mails...

Actualy got one from bill.clinton@thewhitehouse.gov

They expect me to open that ??????? Like I am going to know bill clinton

Yes - the sender was obviously spoofed - but the headers show it originated from the quoted source.

[paulyoung666]

is anyone still getiing netsky viruses , i havent had any for ages , has ntl done something about this ??????????

[altis]

Seems to be quieter here too but got a Netsky.P just yesterday. Perhaps the peeps with our addresses who are infected have finally done something about it.

[Stu038]

I hadn't had any for a couple of weeks till Wednesday night then I got about a dozen, none since luckily. Tbh didn't notice whether they were "P" or not though