Free Republic

Is anyone else getting hit by emails infected with "Netsky"? Over the past week, I've gotten about a dozen messages with the W32.Netsky.Q@mm worm. (Norton makes quick work of them, however.) A few have had return addresses from some of my customers' domains, but the worm can spoof the return address. Symantec's page on the worm is here. I've gotten two thus far today and one automated response from a server where my email address had been spoofed. Is anybody else seeing this worm wiggling in their inbox?

W32.Netsky.X@mm Discovered on: April 20, 2004 Last Updated on: April 20, 2004 10:30:22 AM As of April 20, 2004, due to an increased rate of submissions, Symantec Security Response has upgraded W32.Netsky.X@mm to a Category 3 level threat from a Category 2 threat. W32.Netsky.X@mm is a variant of W32.Netsky.W@mm that scans for email addresses on all non-CD-ROM drives on the infected computer. Then, the worm uses its own SMTP engine to send itself to the email addresses that it finds. The From line of the email is spoofed, and its Subject, Message, and Attachment vary. The attachment has a...