Netsky.P

Netsky.P, discovered on March 21, 2004, appears to be mimicking the Bagle.Q/R/S/T worms - exploiting a vulnerability in Microsoft products to launch the infection automatically. However, Bagle.Q/R/S/T used the newer MS03-032 vulnerability, forcing the infected file to be silently downloaded and executed simply by reading or previewing the email. This ruse rendered most content filters ineffective as there was no attachment and the body text consisted simply of a URL. Netsky.P uses the older and easier exploit found in MS01-020, using a malformed MIME header to trick Internet Explorer into launching the attached file on behalf of the mail client.

As far as viruses go, MS01-020 is the most widely exploited security vulnerability. Patched in March 2001 and later updated in June 2001, it seems unlikely folks would still be vulnerable. However, whether helped by the exploit or facilitated by users willing to click on any email attachment, Netsky.P was considered a medium level threat within 24 hours of its release.

As with previous Netsky variants, Netsky.P is a mass-mailing email worm that also copies itself to shared folders. As such, Netsky.P can spread via internal and P2P filesharing networks. The Netsky.P email attachments will be either .PIF, .SCR, or .ZIP files. Netsky.P scans the local system in search of email addresses which it then uses as both the From and To addresses, using its own SMTP engine to send the spoofed email. When copying itself to shared folders, Netsky.P uses the following filenames:

1001 Sex and more.rtf.exe
3D Studio Max 6 3dsmax.exe
ACDSee 10.exe
Adobe Photoshop 10 crack.exe
Adobe Photoshop 10 full.exe
Adobe Premiere 10.exe
Ahead Nero 8.exe
Altkins Diet.doc.exe
American Idol.doc.exe
Arnold Schwarzenegger.jpg.exe
Best Matrix Screensaver new.scr
Britney sex xxx.jpg.exe
Britney Spears and Eminem porn.jpg.exe
Britney Spears blowjob.jpg.exe
Britney Spears cumshot.jpg.exe
Britney Spears fuck.jpg.exe
Britney Spears full album.mp3.exe
Britney Spears porn.jpg.exe
Britney Spears Sexy archive.doc.exe
Britney Spears Song text archive.doc.exe
Britney Spears.jpg.exe
Britney Spears.mp3.exe
Clone DVD 6.exe
Cloning.doc.exe
Cracks & Warez Archiv.exe
Dark Angels new.pif
Dictionary English 2004 - France.doc.exe
DivX 8.0 final.exe
Doom 3 release 2.exe
E-Book Archive2.rtf.exe
Eminem blowjob.jpg.exe
Eminem full album.mp3.exe
Eminem Poster.jpg.exe
Eminem sex xxx.jpg.exe
Eminem Sexy archive.doc.exe
Eminem Song text archive.doc.exe
Eminem Spears porn.jpg.exe
Eminem.mp3.exe
Full album all.mp3.pif
Gimp 1.8 Full with Key.exe
Harry Potter 1-6 book.txt.exe
Harry Potter 5.mpg.exe
Harry Potter all e.book.doc.exe
Harry Potter e book.doc.exe
Harry Potter game.exe
Harry Potter.doc.exe
How to hack new.doc.exe
Internet Explorer 9 setup.exe
Kazaa Lite 4.0 new.exe
Kazaa new.exe
Keygen 4 all new.exe
Learn Programming 2004.doc.exe
Lightwave 9 Update.exe
Magix Video Deluxe 5 beta.exe
Matrix.mpg.exe
Microsoft Office 2003 Crack best.exe
Microsoft WinXP Crack full.exe
MS Service Pack 6.exe
netsky source code.scr
Norton Antivirus 2005 beta.exe
Opera 11.exe
Partitionsmagic 10 beta.exe
Porno Screensaver britney.scr
RFC compilation.doc.exe
Ringtones.doc.exe
Ringtones.mp3.exe
Saddam Hussein.jpg.exe
Screensaver2.scr
Serials edition.txt.exe
Smashing the stack full.rtf.exe
Star Office 9.exe
Teen Porn 15.jpg.pif
The Sims 4 beta.exe
Ulead Keygen 2004.exe
Visual Studio Net Crack all.exe
Win Longhorn re.exe
WinAmp 13 full.exe
Windows 2000 Sourcecode.doc.exe
Windows 2003 crack.exe
Windows XP crack.exe
WinXP eBook newest.doc.exe
XXX hardcore pics.jpg.exe

Next page: The Netsky.P email