I-Worm.NetSky.c - Hoax?

[Staind]

Hi, just recieved this email:

The following message had attachment(s) which contained viruses:

Subject: MDaemon Warning - Virus Found


From      : staind@sympatico.ca
To        : nnalevanko@greencastle.k12.pa.us
Subject   : believe me
Date      : Sun, 15 Aug 2004 14:12:56 -0400
Message-ID:

Attachment                    Virus name               Action taken
------------------------------------------------------------------------------
portmoney_secrets.doc.exe     I-Worm.NetSky.c          Removed



Boot scan / regular scan of Avast! doesn't detect anything. Is it just a hoax?

[Eddy]

Boot scan / regular scan of Avast! doesn't detect anything.

See the part just above it that say: "portmoney_secrets.doc.exe    I-Worm.NetSky.c          Removed

Avast is doing its work

Only strange thing I see is that you seem to be the sender. Is the one in the "TO" field familiar to you or perhaps even in your contact list?

[Staind]

No, I don't know "nnalevanko@greencastle.k12.pa.us" which is why I thought I was infected.

Thanks !

[Eddy]

Just to be on the safe side. Run a online scan also. I do not think it will find something, but better safe than sorry.

[Staind]

Ok, thanks.


Update: Online scans detected nothing. Guess I'm clean, thanks for your help!

-Staind

[whocares]

Hi,

See the part just above it that say: "portmoney_secrets.doc.exe    I-Worm.NetSky.c          Removed
 
Avast is doing its work

This has nothing to do with avast doing or not doing its job as it sounds like a KASPERSKY-Detection..  
Click4Info

*

General Info on Spoofing/FakeSenderAddress:

Receiving an email alert stating that the virus came from your email address is NOT an indication that you are infected
as the virus often forges the from address:

- somewhere in the infinite reaches of the universe/internet, a PC is infected with netsky AND has your Email-adress saved somewhere.
The Worm then sends out itself with fake sender-adress; a Mailserver-Scanner then wrongly interprets this virus-mail as coming from you, and sends you the above (inappropriate and useless) reply.

if avast says your PC is clean, it most probably is
 

Read the virusinfos (see below or above) on netsky

P.S.:
You can expect some more of these mail-bounces/alerts, or even Netsky being sent to you, if the real sender doesn't cleanup his PC quick...., BUT:
finding out who it really is is next to impossible for you,
- especially if sender doesn't have a fixed IP &
- if you don't get the full mail-headers..