W32/Netsky-P

Category: Viruses and Spyware Protection available since:08 Jun 2006 00:00:00 (GMT)
Type: Win32 worm Last Updated:16 Sep 2010 15:20:23 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Summary

W32/Netsky-P is a worm for the Windows platform.

Detailed analysis

Example behaviours of W32/Netsky-P follow:

Example 1

Runtime Analysis

Copies Itself To
  • C:\WINDOWS\FVProtect.exe
Dropped Files
  • C:\WINDOWS\userconfig9x.dll
    Size
    26K
    SHA-1
    2d9f1c8f24263fd3bc16c953ccbc06edd89cc383
    MD5
    c0cca6c2817f9bfbdcbd8720ee4b3c2a
    CRC-32
    f8a32790
    File type
    application/x-ms-dos-executable
    First seen
    2010-09-16

Example 2

Other vendor detection

Avira
Worm/Netsky.AP
Kaspersky
Email-Worm.Win32.NetSky.q

Runtime Analysis

Copies Itself To
  • C:\WINDOWS\FVProtect.exe
Dropped Files
  • C:\WINDOWS\userconfig9x.dll

Example 3

Runtime Analysis

Copies Itself To
  • C:\WINDOWS\FVProtect.exe
Dropped Files
  • C:\WINDOWS\userconfig9x.dll
    Size
    26K
    SHA-1
    56d0fa91379965ef494b4a5cfd45633e1438cda9
    MD5
    201ae32798ed296a6a2faa664bbaf3b7
    CRC-32
    be56ef8f
    File type
    application/x-ms-dos-executable
    First seen
    2010-09-16

download Try Sophos products for free
Download now