|
|
||||||
|
"your...document" |
||||||
| Wednesday, May 12, 2003 | ||||||
Today we have an 18kb file called "your_document'. |
||||||
|
|
||||||
Looking at it in Windows Explorer it shows up as a Shortcut to MS-DOS file.This one looks promising. |
||||||
|
|
||||||
A warning dialog box opened to see if I really wanted to proceed, sure! Clicking on the attachment the wait Hour Glass showed for a number of seconds then there was no other action. Gee, I guess I'm in the clear right? |
||||||
|
||||||
|
|
||||||
"your_document' installed itself nicely and quite invisibly. Nothing noticable happened right away but after a few minutes a box popped up on the screen saying an internal error had occured and some information was needed. |
||||||
|
|
||||||
By filling out the bare minimum required the MAPU32 was happy. I was not about to enter in my password. I rebooted, checked mail and saw nothing out of the ordinary. Then I switched over to my main machine, checked mail on my personal account and "John Smith" had sent him a letter with an attachment. By looking at the dialog boxes Norton had thrown up this is the W32.Netsky worm. |
||||||
| From Norton: | ||||||
"W32.Netsky.D@mm is a mass-mailing worm that is a variant of W32.Netsky.C@mm. The worm scans drives C through Z for email addresses and sends itself to those that are found. The Subject, Body, and Attachment names vary. The attachment will have a .pif file extension." |
||||||
|
||||||
http://www.symantec.com/avcenter/venc/data/w32.netsky.d@mm.html |
||||||
http://www.symantec.com/avcenter/index.html |
||||||
|
|
||||||
|
|
