1. Symantec/
  2. Security Response/
  3. W32.Netsky.W@mm


Risk Level 2: Low

April 16, 2004
February 13, 2007 12:21:31 PM
Systems Affected:

W32.Netsky.W@mm is a minor variant of W32.Netsky.N@mm. This variant is also a mass-mailing worm that uses its own SMTP engine to send itself to the email addresses it finds when scanning the hard drives and mapped drives.

The "sender" of the email is spoofed, and its subject, message body, and attachment vary. The attachment has .exe, .pif, or .scr as extension. The worm may also send its zipped copy as attachment.

This threat is compressed with UPX.

  • The worm has an MD5 hash value of 0XE6D771C24E8DBAF9543851E893C3E304
  • This threat may be detected as W32.Netsky.gen@mm with defintions prior to 4/17/2004.

Antivirus Protection Dates

  • Initial Rapid Release version April 17, 2004
  • Latest Rapid Release version August 8, 2016 revision 023
  • Initial Daily Certified version April 17, 2004
  • Latest Daily Certified version August 9, 2016 revision 001
  • Initial Weekly Certified release date April 17, 2004
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Yana Liu

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube