[an error occurred while processing this directive]
BBC News
watch One-Minute World News
Last Updated: Tuesday, 2 March, 2004, 13:11 GMT
Pesky Netsky tops virus warnings
Loudspeaker, BBC
Infected machines will beep on 2 March
"Unprecedented" numbers of Windows virus variants are spreading online, say computer security firms.

Current top of the threats is Netsky.D, the fourth version of an e-mail worm that scours networks seeking new addresses to send itself to.

Users will know if their PC has caught the virus because infected machines will beep at certain times on 2 March.

Many of the viruses on the list of top threats are variants of others that appeared only in the last few weeks.

Top threats

The original Netsky virus appeared on 16 February but since then has spawned seven variants.

The most successful of these offspring is Netsky.D that was first seen on 1 March but has spread so fast that many anti-virus companies are already issuing warnings about it.

NETSKY.D SUBJECT LINES
Re: Hello
Re: Hi
Re: Thanks!
Re: Document
Re: Message
Re: Here
Re: Details
Re: Your details
Re: Approved
Re: Your document
Re: Your text
Re: Excel file
Re: Word file
Re: My details
Re: Your music
Re: Your bill
Re: Your letter
Re: Document
Re: Your website
Re: Your product
Re: Your document
Re: Your software
Re: Your archive
Re: Your picture
Re: Here is the document

Netsky.D can infect machines running Windows 95, 98, 2000, ME and XP.

Like many other recent Windows viruses Netsky.D relies on curious users to open the e-mail it travels in and click on the attachment it carries to launch the malicious program.

It disguises itself using a small number of subject lines and names for the attachment. But users can spot the virus because all the fake attachments bear the same .pif suffix.

Once launched the virus scours all the hard drives on networks connected to an infected machine.

"So through infecting just one computer, it can get hold of all e-mail addresses stored on a corporate computer network, maybe some 50,0000 in all, from just a single infected machine," said Mikko Hyppoenen of anti-virus firm F-Secure.

Do not click

Netsky.D avoids sending itself to anti-virus firms and Microsoft in a bid to maximise the time it gets to spread.

The virus also causes infected machines to beep on 2 March between 6:00 and 9:00 AM local time. Each beep will last a random amount of time and be at a random frequency.

Inside the virus is a message mentioning the Czech Skynet website and an organisation called the AntiHacker Crew.

As well as warning about Netsky.D some security firms said the variants of recent viruses were turning up in large numbers.

For instance the Bagle worm was discovered on 18 January and has now spawned eight variants. There are eight different versions of Netsky in circulation and MyDoom has given rise to five new versions as well as some other copycats.

Security firms said users should be wary of messages they were not expecting that arrive bearing attachments.

They added that users should not click on attachments if they do not know what they contain.




SEE ALSO:
Viruses thwart security measures
02 Mar 04  |  Technology
More virus misery for mail users
26 Feb 04  |  Technology
'Gamer's virus' aims to hit users
18 Feb 04  |  Technology
'Protect PCs' Microsoft users told
11 Feb 04  |  Technology
Mydoom virus 'biggest in months'
27 Jan 04  |  Technology
Viruses make criminal move
31 Dec 03  |  Technology
Devious virus attacks on the rise
02 Oct 03  |  Technology


RELATED INTERNET LINKS:
The BBC is not responsible for the content of external internet sites


PRODUCTS AND SERVICES

News Front Page | Africa | Americas | Asia-Pacific | Europe | Middle East | South Asia
UK | Business | Entertainment | Science/Nature | Technology | Health
Have Your Say | In Pictures | Week at a Glance | Country Profiles | In Depth | Programmes
Americas Africa Europe Middle East South Asia Asia Pacific