[R-G] RE: Fw: Worms/Virii: Latest Netsky is Pesky

[David Mcreynolds]

Thanks Vicki,
Will pass on - I've already gotten a couple of these and have reports from
places as distant as Hawaii and Utah that their names are being used to
send on the posts.
David


> [Original Message]
> From: Vicki Rovere <vickirov at worldnet.att.net>
> To: David.Mcr at earthlink.net <david.mcr at earthlink.net>;
<profpaxpj at juno.com>
> Date: 3/3/2004 1:40:20 AM
> Subject: Fw: Worms/Virii: Latest Netsky is Pesky
>
> ----- Original Message ----- 
> From: Blythe Support Desk <support at blythe.org>
> To: <support at blythe.org>
> Sent: Tuesday, March 02, 2004 3:52 PM
> Subject: Worms/Virii: Latest Netsky is Pesky
>
>
> > March 2, 2004
> > 
> > The latest worm on the loose is Netsky-D which, unlike
> > its predecessors, seems to be spreading very rapidly. Our
> > users with well-known e-mail addresses are receiving droves
> > of these; it's very widespread.
> > 
> > Some of our users who rarely or never receive spam are also
> > receiving this one, indicating that their correspondents
> > with Windows machines are more likely to become infected with
> > this worm, probably because its propagation makes it more
> > likely that people will click on it and infect their machines,
> > exposing their entire address book to further attack.
> > 
> > It comes in with a variety of "From:" addresses, and may
> > also appear as an e-mail returned from "MAILER-DAEMON" at
> > various systems.  Beware!  Subject lines vary, from none
> > at all to "Your Archive,"  "Your Document,"  "Your details,"
> > etc.  Attached will be a pif file usually matching the
> > subject, such as "your_archive.pif" or "your_details.pif."
> > 
> > Reuters Technology explained yesterday:
> > 
> > "The worm is particularly difficult to root out because it lands in 
> > e-mail boxes using a number of different subject lines such as 
> > "re:details" or "re:here is the document."
> > 
> > "It arrives with an attached pif file (program information file) and
it's
> > already extremely widespread," said Graham Cluley, senior technology 
> > consultant at Sophos Plc. ...
> > 
> > "When opened, the virus pif file will rapidly replicate itself, slowing 
> > down computers and e-mail bandwidth." [...]
> > 
> > 
> > As always, the only defense if you receive one of these is to delete 
> > the message and purge your inbox, without clicking on any attachments.
> > Your Virus Scanner software and virus footprint list should  be
updated, 
> > and if you use a spam filter program such as Spam Assassin, 
> > you can add such messages to your filter list.  See the website
> > of your virus protection software for updates.
> > 
> > 
> > ***************************
> > Blythe Systems User Support
> > support at blythe.org
>