Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 21 Apr 2004 11:18:54 -0400 (EDT)
From:      rainer <rainer@www.Vif.com>
To:        InterMedia <info@intermedia-haiti.com>
Cc:        questions@freebsd.org
Subject:   Re: Update Your Virus Program & Scan Your Computer - You have sent us message which contains The W32.Netsky@mm Virus
Message-ID:  <20040421111730.L166@www.Vif.com>
In-Reply-To: <200404211332.i3LDJg7s005678@intermedia-haiti.com>
References:  <200404211332.i3LDJg7s005678@intermedia-haiti.com>

next in thread | previous in thread | raw e-mail | index | archive | help
	sorry, not me but a friend of mine had the virus and probably my
name in his address book. he has rectified the situation!

On Wed, 21 Apr 2004, InterMedia wrote:

>
> :::::::::::::::::::::::::::::::::::::::::::::::::::
> W32.Netsky@mm Virus Alert
> - You have sent us message which contains The W32.Netsky@mm Virus
> - Update Your Virus Program & Scan Your Computer
> See: http://vil.nai.com/vil/content/v_101145.htm
> See: http://vil.nai.com/vil/stinger/
> :::::::::::::::::::::::::::::::::::::::::::::::::::
>
> Good Day,
>
> If you received this e-mail it means a message was received by our servers,
> indicating it was sent from your e-mail address, by the Netsky Virus.
>
> If you did send us an e-mail with a virus free attachment, you need to
> resend your message to
> attachment-safe@intermediahaiti.com
> in order for it to be properly routed.
>
> You may need to review the information below in order to resolve the problem
> being created on your e-mail account by the W32.Netsky@mm Virus.
>
> Best Regards,
>
> InterMedia
> The Internet Communications Network of Haiti
> http://www.intermediahaiti.com
> info@intermediahaiti.com
>
> :::::::::::::::::::::::::::::::::::::::::::::::::::
> The W32.Netsky@mm Virus and what you can do about it.
> In short:
> 1) Take the actions recommended here
> 2) Forward this to everyone you know
> :::::::::::::::::::::::::::::::::::::::::::::::::::
>
> The W32.Netsky@mm Virus
> http://vil.nai.com/vil/content/v_101145.htm
> has become so highly prevalent on computers that, at the very least, it is
> no doubt taking up a great deal of your time and energy to delete every day.
> If your computer is infected you are creating an incredible amount of
> trouble for your customary correspondents.
>
> If you are receiving several of these virus messages a day it means people
> who have your e-mail address in their address book, or who have received
> e-mail from you on their computers, have the virus.
>
> The only way to hopefully eliminate this virus is to advise all the people
> in your e-mail address book of its characteristics and the measures which
> need to be taken to remove it from their computers.
>
> The more people you advise, and the more people they advise, the better off
> we will all be from this nuisance, and it will eventually be brought under
> control. If not, you potentially face months of deleting tens or even
> hundreds of messages every day.
>
> There are simple removal tools available for free at:
> http://vil.nai.com/vil/stinger/
> http://securityresponse.symantec.com/avcenter/FxNetsky.exe
>
> If you do not have an anti-virus program, or a current subscription allowing
> you to update your virus definitions, we recommend you repeat this
> debugging every week.
>
> Please take a moment to review what is below in order to verify your own
> computer, and we recommend you forward this message to everyone you know,
> because if you did not send us a message, the probability is high, someone
> who has your address on their computer is infected.
>
> Best Regards,
>
> InterMedia
>
> :::::::::::::::::::::::::::::::::::::::::::::::::::
> W32.Netsky@mm Removal Tool
> :::::::::::::::::::::::::::::::::::::::::::::::::::
>
> Symantec Security Response has developed a removal tool to clean infections
> of the following Netsky variants.
> - W32.Netsky.B@mm
> - W32.Netsky.C@mm
> - W32.Netsky.D@mm
> - W32.Netsky.E@mm
> - W32.Netsky.K@mm
> - W32.Netsky.P@mm
> - W32.Netsky.Q@mm
>
> What the tool does?
> The W32.Netsky@mm Removal Tool does the following:
> - Terminates the W32.Netsky@mm viral processes
> - Deletes the W32.Netsky@mm files
> - Deletes the registry values that the worm added
>
> ----------------------------------------------------------------------------
> ----
> Obtaining and running the tool
> ----------------------------------------------------------------------------
> ----
> --- Download the FxNetsky.exe file from:
> http://securityresponse.symantec.com/avcenter/FxNetsky.exe.
> --- Save the file to a convenient location on your computer.
> --- Close all the running programs before running the tool.
> --- If you are on a network or if you have a full-time connection to the
> Internet, disconnect the computer from the network and the Internet.
>
> Caution: If you are running Windows Me or XP, First *** Disable System
> Restore***. If you are running Windows Me/XP, we strongly recommend that you
> do not skip this step.
> --- Double-click the FxNetsky.exe file to start the removal tool.
> --- Click Start to begin the process, and then allow the tool to run.
> --- Restart the computer.
> --- Run the removal tool again to ensure that the system is clean.
> --- Then re-enable System Restore.
> Note: The removal procedure may not be successful if Windows Me/XP System
> Restore is not disabled as previously directed, because Windows prevents
> outside programs from modifying System Restore.
>
> When the tool has finished running, you will see a message indicating
> whether W32.Netsky@mm infected the computer. In the case of a removal of the
> worm, the program displays the following results:
> --- Total number of scanned files
> --- Number of deleted files
> --- Number of repaired files
> --- Number of terminated viral processes
> --- Number of fixed registry entries
>
> :::::::::::::::::::::::::::::::::::::::::::::::::::
>
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040421111730.L166>