Tech Tips Home
The Best Tech Tips And Daily Deals
Newsletter On The Internet!

WorldStart Tech Tip And Store Search
Email: Password: Login Remember Me
looking for freeware

Like what you see here? Subscribe to the Tech Tips newsletter!   Email: Subscribe

New Threat: Netsky.C Worm

Tuesday, November 9th, 2004 by | Filed Under: Security Help

New Threat: Netsky.C Worm

There’s a new worm out there that I’m sure you’ve run into, and it’s a sneaky one. W32.Netsky.C is a mass-mailing worm that uses its own SMTP engine (mail server) to send infected emails to the email addresses it finds when scanning the hard drives and mapped drives.

Using a variety of subject lines and body text these emails trick the recipient into opening them.

Once unleashed, this worm also searches drives C through Z for folder names containing “Shar” and then copies itself to those folders allowing it to infect any PCs on your network.


You should have updated antivirus software—especially if you are using a POP3 email client (Outlook Express, Netscape Mail, Eudora). Web based like AOL, Yahoo, and Hotmail scan for viruses, so you are less likely to get infected. The big name A-V software companies all keep current on the latest threats, so being up-to-date is a good defense.

Do not open attachements from anyone you don’t know and scan any from friends and family.

The subject lines for infected emails include: Your website, Your letter, Word file, Here is the document, and re: Your Document. There are dozens more, but you get the idea.

The body can include one of the following: Your file is attached, Please read the attached file, Please have a look at the attached file, See the attached file for details, Here is the file, or Your document is attached.

In most cases the attachment will have a .pif file extension

Are You Infected?

If you opened an attachment recently and now you hear a regular beeping sound, chances are you’ve been hit. Run a system scan using A-V software. You should check either McAfee or Symantec’s web sites for a list of registry entries that indicate infection.




If you don’t have any Anti-Virus software on your PC (shame on you) both McAfee and Symantec have removal tools specifically for removing Win32.netsky. You can download these for free.

Mcaffe Stinger

Symantec removal tool

Hopefully none of you fell for this one.

Stay safe out there.

~ Chad Stelnicki

Leave a Reply

Like these tips? Get them for FREE in your email!

WorldStart's Tech Tips Newsletter

  • Tech Tips Daily - Become a tech pro! Get the very best tech and computer help sent directly to your email every weekday!

  • Tech Tips Weekly - If you don't want our Tech Tips newsletter every day, then sign up for this weekly newsletter to get the best information of the week. Sent on Fridays.

Other Newsletters

  • WorldStart's Daily Deals - Every week, we send out great deals in our Daily Deals newsletter. Many of these deals are exclusively for our Daily Deals newsletter subscribers and can't be found with our regular specials.

  • Just For Grins - Each issue includes a couple clean jokes, some funny quotes, and a hilarious reader's story. Newsletter is sent five days a week.

Enter Email Address:


Your e-mail address is safe with us!
We only use it to send you the newsletters you request. It is NEVER disclosed to a third party for any reason, ever! Plus, if you decided you don't like our newsletters (don't worry, you'll love them), unsubscribing is fast and easy.

Free Newsletter Signup

Tech Tips Daily

Become a tech pro! Get the very best tech and computer help sent directly to your email every weekday!

Tech Tips Weekly

The week's best in tech and computer help. Get your issue sent to your email every Friday!

WorldStart's Daily Deals

The very best deals on the Internet! Get a new set of incredible sales every day of the week!

Just For Grins

Clean jokes, funny quotes, and hilarious comics. Sent 5 times a week straight to your email.


Love Worldstart? Refer A Friend!

looking for freeware
WorldStart's Premium Membership

Tip Archive