Re: Virus

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 01/02/05 

Date: Sun, 2 Jan 2005 10:36:34 -0500

That's correct. However it is a Internet worm, sub-type email worm, but your assertion that
there are many variations is right on the nose. Generically it is the W32/Netsky. To be
specific a letter is appended to it.
Example; W32/Netsky.a@MM , W32/Netsky.b@MM and W32/Netsky.aq@MM

Here is a blurb on McAfee's suffix naming convention...

SUFFIX

These designations usually appear as the last

part of a virus name. A virus name can have

more than one suffix. One might designate a

variant, for example, while others give

additional information.

   @M Slow mailer. This virus uses an

            e-mail system to spread. It usually

            replies to an incoming message

            once, or attaches itself to an

            outgoing message, or sends to just

            one e-mail address.

   @MM Mass mailing distribution. This

            virus might use standard techniques

            to propagate itself, but also uses

            an e-mail system to spread.

   .a - .zzz Virus variants. 

-- 
Dave
"Karen" <wrenf1@peoplepc.com> wrote in message news:eWGLKtJ8EHA.2316@TK2MSFTNGP15.phx.gbl...
| I was told that there are many variations of Netsky.  If you look in your
| antivirus software, it has a definition of many virus's, worms, trogans,
| etc.....  You will find upwards of 30 different variations of the Netsky
| virus.
| "N. Miller" <anonymous@discussions.microsoft.com> wrote in message
| news:MPG.1c3dd6655a0a23e498a57b@msnews.microsoft.com...
| > In article <#iAAycV7EHA.2180@TK2MSFTNGP10.phx.gbl>, Karen says...
| >
| >> Beware, Netsky is still on the rampage.  Comes in emails, be careful what
| >> you open.  I caught it, it is called,
| >> W32.Netsky.P@mm!enc From:_3.171544@typhoon.sonic.net, subject line: re
| >> thanks  These are not sent by a person, but generated by a virus.
| >
| > In the past couple of months I have seen email with W32/Netsky.B@mm,
| > W32/Netsky.P@mm, W32/Bagle.N@mm, and W32/Sober.J@mm. I have seen port
| > activity related to MyDoom and Sasser. Yes, viruses are still making the
| > rounds.
| >
| > -- 
| > Norman
| > ~Win dain a lotica, En vai tu ri, Si lo ta
| > ~Fin dein a loluca, En dragu a sei lain
| > ~Vi fa-ru les shutai am, En riga-lint
|
|

Relevant Pages

  • Re: Virus
    ... You will find upwards of 30 different variations of the Netsky ... >> thanks These are not sent by a person, but generated by a virus. ... > In the past couple of months I have seen email with W32/Netsky.B@mm, ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: svchost is consuming more CPU Usage
    ... SVCHOST.EXE is the target of a number of infectors either by name or variations of the name. ... Dave ... | the only worm that i know of attacks the scvhost.exe is bloodhound virus its an unknown ... virus you can go to symantec virus and download the latest virus defination file to remove ...
    (microsoft.public.security.virus)
  • Re: Watch out for this
    ... The 'swen' worm and its effects, ... there is not much you can do to stop the flood. ... e-mail for virus infection. ... You can use a remote virus scan from one of the antivirus program ...
    (microsoft.public.security.virus)
  • Re: I ran the exe file !!!!
    ... point before the virus infection. ... For the moment you should simply stick with MS windows Updates. ... What You Should Know About the Swen Worm ... you have Windows ME or Windows XP, you could run the System Restore ...
    (microsoft.public.security.virus)
  • Windowx 200x/XP virus proof document released
    ... i was asking people to send me virus and worms to my ... Who never downloaded the last remove tool for a last worm or virus ... administrative permission to make system changes. ... 3- Keep FULL CONTROL only to SYSTEM, ADMINISTRATORS and CREATOR OWNER. ...
    (microsoft.public.scripting.virus.discussion)