Virus hunters at McAfee have identified a new variant of the Netsky virus and rate it as a medium risk.
Like other Netsky viruses, the W32/Netskyag@MM offshoot uses an e-mail to gain entry and install itself into several files via the Windows directory. Once installed, it harvests e-mail addresses from the infected machine and sends out copies of itself in messages that look like they’re from people on the e-mail database in the infected computer. The virus differs from earlier versions in that it uses different compression technologies when sending itself out, a representative for security software maker McAfee said Thursday. This makes it more difficult to detect. The subject line on the infected e-mails varies, with about 30 different ones identified so far. Most seem to be in Portuguese or a version of the language. Subject lines include “algo a mais” and “tudo sobre voce sabe.” The message in the e-mail and the attachment use the same dialect and also vary.
Source: ZDNet
Articles RSS