Worm.NetSky Description

Worm.NetSky is a malicious worm that distributes itself as an email attachment. Once executed, Worm.NetSky will add itself to the Windows registry ensuring that it loads each time you turn on your computer. Worm.NetSky will scan your computer for email addresses and will email itself as an attachment to any email addresses found on your PC. Worm.NetSky will also create a backdoor on your PC, which will provide access of your system to remote attackers. Worm.NetSky shouldn’t remain on your system any longer.

Type: Spyware

How Can You Detect Worm.NetSky?

Worm.NetSky Technical Report

As new Worm.NetSky details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following Worm.NetSky files with its MD5s were created in the system:

Worm.NetSky has typically the following processes in memory:

• domnftwqlv.dll
• domnftwtwl.dll

Worm.NetSky creates the following registry entries:

• SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\hjoqor
• 2CD50EED-0440-4D62-BAA2-03E8795A4BB9
• 8E7FF808-43C3-4D5F-AF01-29FD866BBA58

Important Article Disclaimer