NetSky.P is spreading fast



The latest in a long line of NetSky variants, NetSky.P, tries to lull users into a false sense of security by containing spoofed disclaimers from anti-virus firms, The Register reports.

The sixteenth incarnation of NetSky adds a fake scan report to the end of an infected message such as:

+++ Attachment: No Virus found
+++ MessageLabs AntiVirus -

NetSky.P, first spotted over the weekend, was programmed to begin mass mailing yesterday. After encountering only a few copies of the virus during its "seeding" period, email filtering firm MessageLabs blocked 200,000 copies of the worm yesterday afternoon.

Like previous versions, NetSky.P is a mass-mailing email worm which harvests email addresses from infected machines in order to spread. NetSky.P can also propagate across network shares and P2P networks.