W32.Netsky.AC@mm

W32.Netsky.AC@mm is a worm that scans for the email addresses on all non-CD-ROM drives on an infected computer. The worm then uses its own SMTP engine to send itself to the email addresses that it finds.

The From, Body, and attachment of the email vary. The attachment has a .cpl extension.

This threat is compressed with PECompact.

Protection

• Initial Rapid Release version May 3, 2004
• Latest Rapid Release version January 13, 2010 revision 035
• Initial Daily Certified version May 3, 2004
• Latest Daily Certified version January 13, 2010 revision 036
• Initial Weekly Certified release date May 3, 2004

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Low

Distribution

• Distribution Level: High