It is currently Tue Sep 01, 2026 1:15 pm


W32.Netsky.AC@mm Worm

Discuss security related topics in here (Hacking, Cracking, and Protecting)
Do not post HJT Logs here

Moderator: PCguy

W32.Netsky.AC@mm Worm

Postby Geekgirl » Tue Jul 20, 2004 3:42 pm

Be aware of a bogus email, I've seen it before and just recieved it again this morning.
The sender is from support@symantec.com with the subject line Re:Submit a Virus Sample.

It may also name the sender as one of these:
support@symantec.com
support@nai.com
support@norman.com
support@sophos.com

When you open the message it reads:

Dear user of <email.server>,

We have received several abuses:

- Hundreds of infected e-Mails have been sent
from your mail account by the new <random.virus.name> worm
- Spam email has been relayed by the backdoor
that the virus has created

The malicious file uses your mail account to distribute
itself. The backdoor that the worm opens allows remote attackers
to gain the control of your computer. This new worm
is spreading rapidly around the world now
and it is a serios new threat that hits users.

Due to this, we are providing you to remove the
infection on your computer and to
stop the spreading of the malware with a
.special desinfection tool attached to this mail.

If you have problems with the virus removal file,
please contact our support team at <from.address>.
Note that we do not accept html email messages.


<random.team>

Attach: <attachment.name>

--------------------------------------------------------------------------------
This is the

W32.Netsky.AC@mm is a worm that scans for the email addresses on all non-CD-ROM drives on an infected computer. The worm then uses its own SMTP engine to send itself to the email addresses that it finds.
Geekgirl
Geek Alumni
 
Posts: 1214
Joined: Mon Apr 12, 2004 1:00 am

Thanks given:0
Thanks received:0
Top

Return to Security

Who is online

Users browsing this forum: No registered users and 0 guests

cron