1. Symantec/
  2. Security Response/
  3. W32.Netsky.J@mm


Risk Level 2: Low

March 8, 2004
February 13, 2007 12:18:33 PM
Also Known As:
NetSky.J [F-Secure], W32/Netsky-K [Sophos], Win32.Netsky.K [Computer Assoc, WORM_NETSKY.K [Trend]
Systems Affected:

W32.Netsky.J@mm is a mass-mailing worm that uses its own SMTP engine to send itself to the email addresses it finds when scanning hard drives and mapped drives.

The Subject, Body, and Attachment vary.

  • Symantec Consumer products that support Worm Blocking functionality automatically detect this threat as it attempts to spread.
  • The worm has an MD5 hash value of 0x301B39B3E6AAFB7CAE5A9D84E1C78CF6.
  • Virus definitions version 60308i (extended version 3/8/2004 rev. 9) are required to detect this threat.
  • The worm is packed by tELock.

Antivirus Protection Dates

  • Initial Rapid Release version March 8, 2004
  • Latest Rapid Release version August 8, 2016 revision 023
  • Initial Daily Certified version March 8, 2004
  • Latest Daily Certified version August 9, 2016 revision 001
  • Initial Weekly Certified release date March 8, 2004
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: John Canavan

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube