WORM_NETSKY.U

Discussion in 'malware problems & news' started by Marianna, Apr 7, 2004.

Thread Status:
Not open for further replies.
  1. Marianna

    Marianna Spyware Fighter

    Joined:
    Apr 23, 2002
    Posts:
    1,215
    Location:
    B.C. Canada
    Virus type: Worm

    Destructive: No

    This NETSKY variant propagates by sending a copy of itself as an attachment to an email. It uses SMTP (Simple Mail Transfer Protocol) servers in sending email messages to addresses that it gathers from the affected system.

    The following are some samples of the email that it sends out:

    http://www.trendmicro.com/vinfo/images/worm_netsky_u_img1.gif

    http://www.trendmicro.com/vinfo/images/worm_netsky_u_img2.gif

    It also creates a mutex to ensure that only one copy of this worm resides in memory.

    Based on the code, it appears to have some programming errors, which causes it to crash after it attains memory-residency.

    For more information, consult the technical details section. Note that TrendLabs is currently working to provide more information on this malware.

    http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_NETSKY.U
     
    Marianna, Apr 7, 2004
    #1
  2. Randy_Bell

    Randy_Bell Registered Member

    Joined:
    May 24, 2002
    Posts:
    3,004
    Location:
    Santa Clara, CA
    Last edited: Apr 10, 2004
    Randy_Bell, Apr 10, 2004
    #2
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...