February 19, 2004 Information Security Advisory

Another worm [W32.Netsky.B], discovered yesterday, is spreading very quickly.
This worm only affects Windows XP, ME, 2000, 98 and 95 PCs.

W32.Netsky.B is a mass-mailing worm that uses its own SMTP engine to send itself to 
the email addresses it finds when scanning the hard drives and mapped drives. 
This worm also searches drives C through Z for folder names containing "Share" or 
"Sharing," and then copies itself to those folders. 

Recommendation: Update your virus signatures in your antivirus software and run a full scan 
of your computer(s).

To be sure your computer does is not infected with NetSky, download the following removal tool:
http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky.b@mm.removal.tool.html

Symantec's tool requires that you turn off your System Restore during the removal operation.
To turn off system restore, right click on your "my computer" icon, click on "Properties",
go to the System Restore tab, turn it off by checking the "Turn off System Restore" box. 
Run the Symantec removal application. 

When you are done, turn System Restore back on (uncheck the "Turn off System Restore" box).

Happy safe computing!

Frederic Martin
www.workingarts.com

PS: If you want to be removed from this computer security advisory mailing list, please 
reply with "remove" in the subject of the message. To review archived security warnings, 
please go to http://www.workingarts.com/infosecarchives.html