Silly me for thinking Symantec's Netsky.J was the same as everyone else's
Symantec has upgraded Netsky.K to level 3 which is also known as:
W32/Netsky-J [Sophos], Win32.Netsky.J [Computer Associates],
Virus definitions from today (3/8/2004 rev 7) actually protect against
Netsky.K, and now also Netsky.J.
The Stinger tool referenced below does protect against Netsky.K (but not
Netsky.J). The tool detects Netsky.K at W32/Netsky.j@mm (rather
than Symantec's W32.Netsky.k@mm).
Sorry to confuse everyone, but unfortunately the Netsky's are coming out
so quickly that the antivirus organizations are detecting them at
different times therefore the alphabetization of them isn't consistent.
On Mon, 8 Mar 2004, Stefanie Ploof wrote:
> Network Associates has published a new stinger removal tool to protect
> against and clean up after Netsky.J. Still no virus definitions for the
> central servers (therefore, none for desktops) but they will be available
> sometime tomorrow according to Symantec.
> To obtain the Stinger removal tool to protect against Netsky.J visit:
> and follow either of the Stinger links (one local, one remote).
> On Mon, 8 Mar 2004, Stefanie Ploof wrote:
> > W32.Netsky.J@mm was detected by antivirus organizations earlier today.
> > Due to increased number of submissions to Network Associates, this is
> > considered a medium/level 3 threat and I expect that Symantec will also
> > upgrade it from low/level 2 to medium/level 3 by tomorrow.
> > Unfortunately, there are currently no virus definitions stand-alone
> > removal tools for Netsky.J, but as soon as any are available I will update
> > our local pages and notify this list.
> > Questions or problems regarding Netsky.J should be directed to CIT
> > Helpline at [log in to unmask] or 6-2604.
> > Stefanie