W32.Netsky.AD@mm

W32.Netsky.AD@mm is a mass-mailing worm that uses its own SMTP engine to send itself to the email addresses it finds on the infected computer.

The email subject, message body, and attachment are variable.

This threat is compressed with UPX and PCPEC.

Protection

• Initial Rapid Release version October 13, 2004
• Latest Rapid Release version July 26, 2008 revision 017
• Initial Daily Certified version October 13, 2004
• Latest Daily Certified version January 20, 2009 revision 048
• Initial Weekly Certified release date October 13, 2004

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 3 - 9
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Low

Distribution

• Distribution Level: High