Security news1 March 2004
Information about W32/Netsky and W32/Bagle internet worms
Last updated: 9 September 2004
Sophos technical support has warned users of the many different versions of the W32/Netsky and W32/Bagle worms, which are engaged in an internet skirmish, and provided instructions on how businesses can protect themselves.
Enterprise Manager and PureMessage customers were automatically protected against the worms at their regular scheduled update. Sophos's email gateway products can even detect the Bagle worm when it is password-encrypted inside a Zip or RAR file.
Protect yourself now against W32/Netsky:
- W32/Netsky-A analysis and protection
- W32/Netsky-B analysis and protection
- W32/Netsky-C analysis and protection
- W32/Netsky-D analysis and protection
- W32/Netsky-E analysis and protection
- W32/Netsky-F analysis and protection
- W32/Netsky-G analysis and protection
- W32/Netsky-H analysis and protection
- W32/Netsky-I analysis and protection
- W32/Netsky-J analysis and protection
- W32/Netsky-K analysis and protection
- W32/Netsky-L analysis and protection
- W32/Netsky-M analysis and protection
- W32/Netsky-O analysis and protection
- W32/Netsky-P analysis and protection
- W32/Netsky-Q analysis and protection
- W32/Netsky-R analysis and protection
- W32/Netsky-S analysis and protection
- W32/Netsky-T analysis and protection
- W32/Netsky-U analysis and protection
- W32/Netsky-V analysis and protection
- W32/Netsky-X analysis and protection
- W32/Netsky-Y analysis and protection
- W32/Netsky-Z analysis and protection
- W32/Netsky-AA analysis and protection
- W32/Netsky-AB analysis and protection
- W32/Netsky-AC analysis and protection
Protect yourself now against W32/Bagle:
- W32/Bagle-A analysis and protection
- W32/Bagle-B (also known as W32/Tanx-A) analysis and protection
- W32/Bagle-C analysis and protection
- W32/Bagle-D analysis and protection
- W32/Bagle-E analysis and protection
- W32/Bagle-F analysis and protection
- W32/Bagle-G analysis and protection
- W32/Bagle-H analysis and protection
- W32/Bagle-I analysis and protection
- W32/Bagle-J analysis and protection
- W32/Bagle-K analysis and protection
- W32/Bagle-N analysis and protection
- W32/Bagle-O analysis and protection
- W32/Bagle-Q analysis and protection
- W32/Bagle-R analysis and protection
- W32/Bagle-U analysis and protection
- W32/Bagle-V analysis and protection
- W32/Bagle-W analysis and protection
- W32/Bagle-AA analysis and protection
Further reading:
- Netsky suspect charged with computer sabotage
- "Netsky virus made me hero of my class", virus writer tells magazine
- Harry Potter-mania helps Netsky-P stay prevalent
- Suspected author of Netsky and Sasser worms arrested in Germany
- New Netsky worm poses as a cure for Sasser, as Netsky author claims he is the creator of the Sasser worm
- Bagle-W worm: "I just need a friend"
- "We don't need no education" - Netsky variants launch attack against educational websites
- Netsky-V worm slithers without attachment
- Netsky-Q worm set to blast websites off the internet
- Netsky-R worm continues viral war
- Bagle-U worm turns PCs into card-playing zombies
- New Bagle variants come with a new twist, as they spread without an attachment
- Bagle worm uses graphic passwords in attempt to avoid detection
- Sophos protects against Bagle worm inside password-encrypted RAR files
- Were Netsky-L and Netsky-M written by a new virus writer? Has the Netsky source code been released?
- Sophos protects against Bagle worm inside password-encrypted Zip files
- Bagle and Netsky: It's war of the worms
- Bagle-K worm poses as message from "The Management"
- Worm war of words: Bagle-J worm launches vulgar tirade against Netsky
- Did your computer go beep beep beep? Maybe you have the Netsky worm
- New variant: W32/Netsky-E worm discovered
- Widespread Netsky-D worm disguises itself as a PIF file
- Netsky-C worm poses as porn, patches, hacks and cracks
- Netsky-B worm spreads using sexy filenames
- Five new Bagle variants appear over weekend
- Bagle-B (Tanx-A) warning from Sophos
- Bagle-A worm spreads over internet disguised as Windows Calculator
Sophos suggests computer users sign up for email notification of new virus threats and add a live virus information feed to their websites.
