W32.Netsky.S@mm

W32.Netsky.S@mm is a mass-mailing worm and a variant of W32.Netsky.R@mm. It also contains backdoor functionality and may perform Denial of Service (DoS) attack against specified Web sites. The email has a variable subject line and attachment name. The attachment will have a .pif file extension.

Protection

• Initial Rapid Release version April 5, 2004
• Latest Rapid Release version July 12, 2008 revision 018
• Initial Daily Certified version April 5, 2004
• Latest Daily Certified version July 12, 2008 revision 019
• Initial Weekly Certified release date April 7, 2004

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Medium

Distribution

• Distribution Level: High