Home Malware Programs Worms Worm.NetSky.T

Worm.NetSky.T

Posted: May 17, 2007

Threat Metric

Threat Level: 9/10
Infected PCs: 17
First Seen: July 24, 2009
OS(es) Affected: Windows

Worm.NetSky.T is a malicious mass-mailing worm that is designed to spread as an email attachment. Once it is installed, Worm.NetSky.T will set in Windows Registry to be able to launch every time you load your computer. Worm.NetSky.T has two processes and when one process is stopped, the other gets loaded in order to continue its malicious work; therefore it difficult to get rid of this parasite. Worm.NetSky.T may search and send its copies to all addresses found onto your computer. Moreover, Worm.NetSky.T may open up a backdoor on your machine, and this places any financial or banking information stored on your computer in severe jeopardy and represents a serious security risk.

Aliases

PE_SALITY.AS [TrendMicro]W32/Sality-AA [Sophos]Covert.Sys.Exec [Prevx1]W32/Netsky.dam.worm [Panda]Win32/Sality.R [Microsoft]W32/Netsky.t@MM [McAfee]Email-Worm.Win32.NetSky.T [Ikarus]Worm.NetSky.t [eWido]suspicious Trojan/Worm [eSafe]Win32.HLLP.Sector [DrWeb]W32.Sality.Q-1 [ClamAV]W32.Sality.Q [CAT-QuickHeal]Win32.Sality.M [BitDefender]I-Worm/Netsky.T [AVG]Win32:Netsky-T [Avast]
More aliases (25)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



approved_file7.pif File name: approved_file7.pif
Size: 59.39 KB (59392 bytes)
MD5: 290fb527a36be83055de09e9aebc01cd
Detection count: 21
Mime Type: unknown/pif
Group: Malware file
Last Updated: December 11, 2009
EasyAV.exe, e-mail3.pif, secound_document4.pif File name: EasyAV.exe, e-mail3.pif, secound_document4.pif
Size: 38.91 KB (38912 bytes)
MD5: f1eac29a09279d51c81585ae47c5255d
Detection count: 8
Mime Type: unknown/pif
Group: Malware file
Last Updated: December 11, 2009

2 Comments

  • samya says:

    I have worm.win32.netsky on my computer. I can use my e-mail, internet ok but I cannot start my computer in safe mode to make the corrections I've downloaded from your site. Is it ok to start it with last known good configuration and then remove this pest?

  • Sharon says:

    Not sure what to do but reading this helped a little. wish i had more knowledge of what i was doing. know how to use the computer just not how to fix them. This virus has got in to my desk top computer lucky for me i have the laptop. but difficult to down load any thing that will help me.

Loading...