Sophos

W32/Netsky-AE

Aliases
  • Email-Worm.Win32.NetSky.aa
  • W32/Netsky.z@MM
  • WORM_NETSKY.Z
Category
Type
What to do
Prevalence low high

Summary

 
How it spreads
  • Email attachments
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Included in our products from January 2005 (3.89)
Protection available since 27 November 2004 08:37:28 (GMT)
Detected by All Sophos products

Action

Please read the instructions for removing W32/Netsky-AE.

More Information

W32/Netsky-AE is a mass-mailing worm of the Netsky family.
W32/Netsky-AE is a mass-mailing worm that uses its own SMTP engine to email
itself to addresses harvested from files on local drives. W32/Netsky-AE is a mass-mailing worm of the Netsky family.

W32/Netsky-AE is a mass-mailing worm that uses its own SMTP engine to email
itself to addresses harvested from files on local drives.

In order to run automatically the worm copies itself to the file Jammer2nd.exe in the Windows folder and creates the following registry entry:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
Jammer2nd
%WINDOWS%\Jammer2nd.exe

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer