1. /
  2. Security Response/
  3. W32.Netsky.AC@mm


Risk Level 2: Low

May 3, 2004
February 13, 2007 12:22:27 PM
Also Known As:
WORM_NETSKY.AC [Trend], W32/Netsky-AC [Sophos], Win32.Netsky.AC [Computer Asso, I-Worm.NetSky.ad [Kaspersky]
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

W32.Netsky.AC@mm is a worm that scans for the email addresses on all non-CD-ROM drives on an infected computer. The worm then uses its own SMTP engine to send itself to the email addresses that it finds.

The From, Body, and attachment of the email vary. The attachment has a .cpl extension.

This threat is compressed with PECompact.

Antivirus Protection Dates

  • Initial Rapid Release version May 3, 2004
  • Latest Rapid Release version July 29, 2012 revision 025
  • Initial Daily Certified version May 3, 2004
  • Latest Daily Certified version July 30, 2012 revision 001
  • Initial Weekly Certified release date May 3, 2004
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment


  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Moderate


  • Damage Level: Low


  • Distribution Level: High
Writeup By: Robert X Wang

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver