I-Worm.NetSky.c - Hoax?

Avast Free Antivirus / Premium Security
1

Hi, just recieved this email:

The following message had attachment(s) which contained viruses:

Subject: MDaemon Warning - Virus Found

From : staind@sympatico.ca
To : nnalevanko@greencastle.k12.pa.us
Subject : believe me
Date : Sun, 15 Aug 2004 14:12:56 -0400
Message-ID:

Attachment Virus name Action taken

portmoney_secrets.doc.exe I-Worm.NetSky.c Removed

Boot scan / regular scan of Avast! doesn’t detect anything. Is it just a hoax?

2
Boot scan / regular scan of Avast! doesn't detect anything.
See the part just above it that say: "portmoney_secrets.doc.exe I-Worm.NetSky.c [b]Removed[/b]

Avast is doing its work :smiley:

Only strange thing I see is that you seem to be the sender. Is the one in the “TO” field familiar to you or perhaps even in your contact list?

3

No, I don’t know “nnalevanko@greencastle.k12.pa.us” which is why I thought I was infected.

Thanks :)!

4

Just to be on the safe side. Run a online scan also. I do not think it will find something, but better safe than sorry.

5

Ok, thanks.

Update: Online scans detected nothing. Guess I’m clean, thanks for your help!

-Staind

6

Hi,

See the part just above it that say: "portmoney_secrets.doc.exe I-Worm.NetSky.c [b]Removed[/b]

Avast is doing its work

This has nothing to do with avast doing or not doing its job as it sounds like a KASPERSKY-Detection… :wink:
Click4Info

General Info on Spoofing/FakeSenderAddress:

Receiving an email alert stating that the virus came from your email address is NOT an indication that you are infected
as the virus often forges the from address:

  • somewhere in the infinite reaches of the universe/internet, a PC is infected with netsky AND has your Email-adress saved somewhere.
    The Worm then sends out itself with fake sender-adress; a Mailserver-Scanner then wrongly interprets this virus-mail as coming from you, and sends you the above (inappropriate and useless) reply.

if avast says your PC is clean, it most probably is
:wink:

Read the virusinfos (see below or above) on netsky :wink:

P.S.:
You can expect some more of these mail-bounces/alerts, or even Netsky being sent to you, if the real sender doesn’t cleanup his PC quick…, BUT:
finding out who it really is is next to impossible for you,

  • especially if sender doesn’t have a fixed IP :wink: &
  • if you don’t get the full mail-headers…
    :wink: