More NetSky worms. So much for quittin

Discussion in 'malware problems & news' started by bigc73542, Mar 11, 2004.

Thread Status:
Not open for further replies.
  1. bigc73542

    bigc73542 Retired Moderator

    Joined:
    Sep 21, 2003
    Posts:
    23,873
    Location:
    SW. Oklahoma
    More NetSky worms. So much for quittin

    Link to story: http://www.theregister.co.uk/2004/03/11/more_netsky_worms_so_much/

     
  2. steve1955

    steve1955 Registered Member

    Joined:
    Feb 7, 2004
    Posts:
    1,384
    Location:
    Sunny(in my dreams)Manchester,England
    can anybody tell me if this worm when it harvests email addresses can send mail as if from one of those addresses(not just to the harvested addresses)?
    I ask tis because I have had an email "bounced" back to me by a recipients AV mail protection but
    1)I do not know the recipient and they are definetly are not in my address book
    2)I know my pc is clean,AV software updated very regularly and have just scanned 3 times once with AVs on demand scanner and twice with downloaded tools(just to make extra sure!)
    3) pc not in use and house empty(apart from 2 cats and 1 dog(none of which I am sure use pc when I'm not there!)at time email was supposedly sent
    I know there are "tools" available which allow you to send email as if from any address I think this is the most poss explanation unless this worm do what I originally asked
    Steve
     
  3. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,331
    Location:
    Netherlands
    Hi Steve1955,

    Some viruses can "spoof" the address they were sent from. In other words pretend to be sent by you, while they were never even close to your computer.
    I know the first versions of Netsky had that capability. Not sure about the later ones, but I'm assuming they can do that to.

    Regards,

    Pieter
     
  4. steve1955

    steve1955 Registered Member

    Joined:
    Feb 7, 2004
    Posts:
    1,384
    Location:
    Sunny(in my dreams)Manchester,England
    Thanks Pieter
     
Loading...
Thread Status:
Not open for further replies.