There appears to be a new version of netsky circulating, several antivirus vendors have updated definitions. System admins, and users should check to verify that virus definitions are up to date. Although it appears that it does not distribute it, this new variant does include some password stealing code which was originally from BugBear, it is quite possible that even after the removal of the virus, your system could still have passwords stored on it, which might have already been retrived, for this reason, it is safe to recommend that any password for any user which uses a machine which is found to be compromised should be changed.

Botnet information still needed

We have got a lot of botnet information, but we continue to need more, please continue to forward any information you get to us.

--------------------
Michael Haisley mhaisley@isc.sans.org