Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Vanity: Is anyone else getting hit with "Netsky"?
4/30/04 | Redcloak

Posted on 04/30/2004 4:34:50 PM PDT by Redcloak

Is anyone else getting hit by emails infected with "Netsky"?

Over the past week, I've gotten about a dozen messages with the W32.Netsky.Q@mm worm. (Norton makes quick work of them, however.) A few have had return addresses from some of my customers' domains, but the worm can spoof the return address. Symantec's page on the worm is here.

I've gotten two thus far today and one automated response from a server where my email address had been spoofed. Is anybody else seeing this worm wiggling in their inbox?


TOPICS: Miscellaneous; Technical
KEYWORDS: netsky; virus; worm
Navigation: use the links below to view more comments.
first 1-2021-4041-46 next last

1 posted on 04/30/2004 4:34:50 PM PDT by Redcloak
[ Post Reply | Private Reply | View Replies]

To: Redcloak
This is the 1st week I have not had one virus sent to me. Usually I avg about 10/wk. Which is not that many compared to some.
2 posted on 04/30/2004 4:37:05 PM PDT by mlbford2
[ Post Reply | Private Reply | To 1 | View Replies]

To: Redcloak
I get about 25-30 of these a week. Thank God for Norton. Zaps the virus in the attachment before it's sent to me.

Even though I never open attachments.

3 posted on 04/30/2004 4:42:49 PM PDT by SheLion (Curiosity killed the cat BUT satisfaction brought her back!!!)
[ Post Reply | Private Reply | To 1 | View Replies]

To: SheLion
I'm still getting about 10 a week. I send 'em on to their ISP.
4 posted on 04/30/2004 4:45:15 PM PDT by tacticalogic (Controlled application of force is the sincerest form of communication.)
[ Post Reply | Private Reply | To 3 | View Replies]

To: Redcloak
Not until you posted this.
5 posted on 04/30/2004 4:45:37 PM PDT by bayourod (To 9/11 Commission: Unless you know where those WMDs are, don't bet my life that they don't exist.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: SheLion
Me too.
6 posted on 04/30/2004 4:45:37 PM PDT by kddid
[ Post Reply | Private Reply | To 3 | View Replies]

To: Redcloak
I do not use outlook as a mail client.
I use a web-based mail service only.
I am getting fewer of these this week than last.
It was 2 0r 3 a day last week, only 2 or 3 total this week.
Some are messages with infected attachements.
Some are 'send' errors from various postmasters
rejecting mail that was spoofed w/ me as the sender.
I suspect somebody w/ the virus has my email address in their address book.
I tried warning my contacts, but most of them are not very computer savy,
and most of them just respond w/ a ?huh?.
7 posted on 04/30/2004 4:49:12 PM PDT by DefCon
[ Post Reply | Private Reply | To 1 | View Replies]

To: mlbford2
I thought I was the only one getting dozens a week. I use Cox Cable service with an automatic intercept on Email. The infected message never gets to me, just a message from Cox telling me it was intercepted - and if I would like to “click here” I can get it (yea - right!).
I’ve been running Norton every few days, but Cox seems to get them all.
8 posted on 04/30/2004 4:49:18 PM PDT by R. Scott (Humanity i love you because when you're hard up you pawn your Intelligence to buy a drink.)
[ Post Reply | Private Reply | To 2 | View Replies]

To: Redcloak
If you are talking about the virus that tells me that my domain is sending out unsafe mail, I get bombed about forty times a day.
9 posted on 04/30/2004 4:54:01 PM PDT by mlmr (Significant or Trivial)
[ Post Reply | Private Reply | To 1 | View Replies]

To: DefCon
I suspect somebody w/ the virus has my email address in their address book.

If you check the headers, you can find the ip address it came from (it will be the ip address in the Received From: line added by the first mail server it hit at your ISP - everything before that is a lie). You can take that and go to www.dnsstuff.com to find out which ISP owns that address. Forward it to abuse@ that ISP. They can check their logs and find out who it's coming from.

10 posted on 04/30/2004 4:56:12 PM PDT by tacticalogic (Controlled application of force is the sincerest form of communication.)
[ Post Reply | Private Reply | To 7 | View Replies]

To: Redcloak
We see a few hundred a day on my work network, but we have a pretty robust gateway antivirus and firewall solution so nothing gets through. This is actually down from when MyDoom hit the internet we would see several thousand hits everyday of that virus :)
11 posted on 04/30/2004 4:58:56 PM PDT by battousai (Islamic terrorists are like cancer... can you negotiate with Cancer?)
[ Post Reply | Private Reply | To 1 | View Replies]

To: mlbford2
Same here...first week WITHOUT netsky.....but my ISP instituted BARRACUDA something.....and must have found a way to take care of them....I didn't even get any notifications from them this week that they'd caught anything! (Maybe they decided not to bother with the notifying....it was an irritant anyway.)
12 posted on 04/30/2004 5:12:02 PM PDT by goodnesswins (Tagging you.....)
[ Post Reply | Private Reply | To 2 | View Replies]

To: Redcloak
I have been getting spammed all week. One email that was sent to me has my address but with a 3D in front, how can this get to me if it has the wrong email address?
13 posted on 04/30/2004 5:15:13 PM PDT by angcat
[ Post Reply | Private Reply | To 1 | View Replies]

To: tacticalogic
I'm still getting about 10 a week. I send 'em on to their ISP.

How do you do that?

14 posted on 04/30/2004 5:15:26 PM PDT by SheLion (Curiosity killed the cat BUT satisfaction brought her back!!!)
[ Post Reply | Private Reply | To 4 | View Replies]

To: SheLion
See 10.
15 posted on 04/30/2004 5:16:13 PM PDT by tacticalogic (Controlled application of force is the sincerest form of communication.)
[ Post Reply | Private Reply | To 14 | View Replies]

To: kddid
Me too.

It's disgusting. At first, I got really mad. Then I just block sender or delete the stupid stuff. But it sure takes up time that I could put to better use.

16 posted on 04/30/2004 5:16:42 PM PDT by SheLion (Curiosity killed the cat BUT satisfaction brought her back!!!)
[ Post Reply | Private Reply | To 6 | View Replies]

To: tacticalogic
See 10.

I just did. I copied and pasted and saved the info. Thanks!!!! :)

17 posted on 04/30/2004 5:19:09 PM PDT by SheLion (Curiosity killed the cat BUT satisfaction brought her back!!!)
[ Post Reply | Private Reply | To 15 | View Replies]

To: SheLion
Use the IP Whois to find out who's network it's coming from. Works for regular spam, too, but if it traces back to China or one of the former Soviet republics (lots of them do), it's probably a waste of time to report it.
18 posted on 04/30/2004 5:21:45 PM PDT by tacticalogic (Controlled application of force is the sincerest form of communication.)
[ Post Reply | Private Reply | To 17 | View Replies]

To: Redcloak
I have been getting the microsoft "patch" thing from russia 2-3 times a day - driving me nuts as I get almost no spam.
19 posted on 04/30/2004 5:32:22 PM PDT by Oystir
[ Post Reply | Private Reply | To 1 | View Replies]

To: Redcloak
No. 

You probably wrote it. 

I'm calling the FBI.

20 posted on 04/30/2004 5:34:52 PM PDT by Psycho_Bunny
[ Post Reply | Private Reply | To 1 | View Replies]


Navigation: use the links below to view more comments.
first 1-2021-4041-46 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson