1. /
  2. Security Response/
  3. W32.Netsky.AA@mm

W32.Netsky.AA@mm

Risk Level 2: Low

Discovered:
April 27, 2004
Updated:
February 13, 2007 12:22:08 PM
Also Known As:
WORM_NETSKY.AA [Trend], W32/Netsky.aa@MM [McAfee], Win32.Netsky.AA [Computer Asso, W32/Netsky-AA [Sophos]
Type:
Worm
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP


W32.Netsky.AA@mm is a variant of W32.Netsky.Z@mm that scans for email addresses on all non-CD-ROM drives on the infected computer. It uses its own SMTP engine to send itself to the email addresses that it finds.

Its Subject, Message, and Attachment vary. The attachment has a .pif extension.

This threat is compressed with PECompact.


Note: Definitions dated prior to April 27, 2004 may detect this threat as W32.Netsky.Z@mm


Antivirus Protection Dates

  • Initial Rapid Release version April 27, 2004
  • Latest Rapid Release version November 23, 2012 revision 022
  • Initial Daily Certified version April 27, 2004
  • Latest Daily Certified version November 24, 2012 revision 005
  • Initial Weekly Certified release date April 28, 2004
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Moderate

Damage

  • Damage Level: Low

Distribution

  • Distribution Level: High
Writeup By: Robert X Wang

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report, Volume 17
Symantec DeepSight Screensaver