W32/NetskyP@mm

I just received an e-mail claiming I sent Netsky fo a free credit report site. No one using my computer has sent such an e-mail. I have norton Antivirus updated and scan finds no virus. Also using Norton Firewall updated. Can anyone tell me from the header if this is a scam?
Received: from freecreditprofile.com (wbar7.sea1-4-4-046-189.sea1.dsl-verizon.net [4.4.46.189])
by sister.slo-ext.truelink.com (Postfix) with ESMTP id AE2AF4F388
for <service@freecreditprofile.com>; Sun, 16 May 2004 16:02:11 -0700 (PDT)
From: ~snipped~ @bigfoot.com
To: service@freecreditprofile.com
Subject: Mail Delivery (failure service@freecreditprofile.com)
Date: Sun, 16 May 2004 16:02:15 -0700
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_000_001B_01C0CA80.6B015D10"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <20040516230211.AE2AF4F388@sister.slo-ext.truelink.com>
I have downloaded Symantec's Netsky removal tool and run it three times. It always runs a long time and then hangs up and I have reported the error to Microsoft. Any ideas?

 

Hi Paul,

Someone you know that may have your email in their address book, may be infected with this worm, which means your email was probably spoofed. But to be on the safe side you should do an on-line scan.

Here is a link to Panda Antivirus site with a description of the worm and also the link to their on-line scanner.

http://www.pandasoftware.com/virus_info/encyclopedia/overview.aspx?idvirus=45740

Let us know how everything turns out.

Regards,

snap

 

the strain you reported is detected by almost all major AVs with March update. its likely that it found your email address and spoofed it. worms do that all the time. if your updated NAV says no then its not on your sustem. don't worry. here is a link that might help you out.

http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky.p@mm.html