Next virus...

Author
Discussion

simpo two

Original Poster:

85,498 posts

266 months

Thursday 19th February 2004
quotequote all
Had a warning from Symantec today about W32.Netsky.B@mm, so check your AV folks.

Podie

46,630 posts

276 months

Thursday 19th February 2004
quotequote all
Yeah, another mass mailing worm. Think a few of the anti-virus companies have put it on a high level, but it's not as much of a pain as the others, certainly not in the same league as MyDoom.

Keep your anti-virus up to date and you shouldn't have many issues.

simpo two

Original Poster:

85,498 posts

266 months

Thursday 19th February 2004
quotequote all
That's the spirit. I guess how much you get affected by a virus depends on whether you're in somone's address book who has it... like my Novargs - relentless for 2 weeks, then nothing.

Bring 'em on!!!

TheHobbit

1,189 posts

252 months

Thursday 19th February 2004
quotequote all
simpo two said:
That's the spirit. I guess how much you get affected by a virus depends on whether you're in somone's address book who has it... like my Novargs - relentless for 2 weeks, then nothing.

Bring 'em on!!!


or, with the newer ones, if they have been to a web page with your address on it.....

unlicensed

7,585 posts

251 months

Thursday 19th February 2004
quotequote all
glad i dont get much to any crap spam and random virus mails.

Podie

46,630 posts

276 months

Friday 20th February 2004
quotequote all
Quick summary of the updates I was dealing with in the last 48 hours...


W32/Netsky.b@MM is a Medium Risk mass-mailing worm that copies itself to folders named "share" or "sharing" on the infected system. It spreads itself to addresses it steals, spoofing or forging the "from: field" or using the address skynet@skynet.de. The worm also tries to deactivate the W32/Mydoom.a@MM and W32/Mydoom.b@MM viruses on the host computer.

Aliases: Moodown.B, I-Worm.Moodown.b

Caution: An infected email can come from addresses you recognize.

----

W32/Bagle.b@MM is a Medium Risk mass-mailing worm with a potentially dangerous remote access component that may open a backdoor on an infected computer to hackers. Similar to last month's outbreak, W32/Bagle.b@MM arrives as an executable attachment inside an email. When run, the virus emails itself to addresses it steals from the infected computer, spoofing the "from: field" with one of the harvested addresses.

If the date is Feb. 25, 2004 or later, the worm simply exits and does not attempt to spread.

Aliases: W32.Aula@mm, W32/Tanx.A-mm

Caution: An infected email can come from addresses you recognize.

simpo two

Original Poster:

85,498 posts

266 months

Friday 20th February 2004
quotequote all
Ha - guess what just fell into my virus zoo? Yup, two Netskys!! Welcome chaps, make youself at home with your new friends MyDoom, Swen et al.