I think the prevalence of an old email virus is two things: 1) It shows that people who were infected, stayed infected.
That's a non-trivial point; there have been several "wars" by the backdoor gangs as they clean rival infections out to take sole p0wnership of a box. 2) Since those infections send out email, it shows that a sucker is born every minute. There are new infectees, but the message is the same from the old worm, new recipients are falling for an "old line". Andrew 8) p.s. Check out the link for the NetSky variant, this particular worm packs a lot of features, all it needs is a rootkit to complement the other defense mechanisms. > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Gary Steiner > Sent: Tuesday, May 01, 2007 10:49 AM > To: [email protected] > Subject: re: [Declude.Virus] Interesting notes on recent > virus activity from Kaspersky > > Or does this show that there are too many people out there > who don't have anti-virus software on their computers? > > > -------- Original Message -------- > > From: "Colbeck, Andrew" <[EMAIL PROTECTED]> > > Sent: Tuesday, May 01, 2007 1:11 PM > > To: [email protected] > > Subject: [Declude.Virus] Interesting notes on recent virus activity > > from Kaspersky > > > > http://www.viruslist.com/en/weblog?calendar=2007-04 > > > > > > For example, here is point 8 of 10: > > > > * Most Common Malicious Program in Email Traffic - > > Email-Worm.Win32.NetSky.q > > <http://www.viruslist.com/en/viruses/encyclopedia?virusid=22760> , > > which has been around for years, but still managed to > account for 14% > > of all malicious email traffic in March, which just goes to > show that > > the older malware is still going strong. > > > > > > Andrew. > > > > > > > > > > > > > > > > --- > > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, > > just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus". The archives can be found > > at http://www.mail-archive.com. > > > > > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > > --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
