Details
I-Worm.NetSky.e
This worm spreads via the Internet as a file attached to infected messages. The worm itself is a PE EXE file of approximately 23KB, packed using Petite. The unpacked file is approximately 39KB in size.
This program is simply an insignificant reworking of I-Worm.NetSky.c.
The name of the files the worm creates in the system registry auto-run key are identical to those created by NetSky.c.
The only way in which the worm differs from previous versions is that the list of extensions used for attached files has had two values added to it, and the fact that the worm does not copy itself to directories containing the word shar.
