topic NetSky.p in Network Security https://community.cisco.com/t5/network-security/netsky-p/m-p/411491#M91420 <P>I have a IPS in the border and have qualified deny packet, deny connection and deny to attacker for the signature of NetSky and have noticed in my internal antivirus that the IPS this not blocking NetSky. The antivirus detects W32/NetSky.p.em What I can do?</P> Sun, 10 Mar 2019 09:41:39 GMT popvalores 2019-03-10T09:41:39Z NetSky.p https://community.cisco.com/t5/network-security/netsky-p/m-p/411491#M91420 <P>I have a IPS in the border and have qualified deny packet, deny connection and deny to attacker for the signature of NetSky and have noticed in my internal antivirus that the IPS this not blocking NetSky. The antivirus detects W32/NetSky.p.em What I can do?</P> Sun, 10 Mar 2019 09:41:39 GMT https://community.cisco.com/t5/network-security/netsky-p/m-p/411491#M91420 popvalores 2019-03-10T09:41:39Z Re: NetSky.p https://community.cisco.com/t5/network-security/netsky-p/m-p/411492#M91421 <HTML><HEAD></HEAD><BODY><P></P><P>What AV solution are you using? I ran a quick search of the more common vendors and can't find reference to this specific version of netsky.</P><P></P><P>We do have some Netsky covereage, but it is limited to the variants covered by signature 3136.</P></BODY></HTML> Mon, 17 Oct 2005 13:22:38 GMT https://community.cisco.com/t5/network-security/netsky-p/m-p/411492#M91421 wsulym 2005-10-17T13:22:38Z Re: NetSky.p https://community.cisco.com/t5/network-security/netsky-p/m-p/411493#M91422 <HTML><HEAD></HEAD><BODY><P>The AV that use is McAfee.</P><P>The AV detect W32/NetSky.d.em!!.exe and W32/NetSky.p.em!!.exe.</P><P></P><P>I have qualified signature 3136, but even so she does not detect it, blocks it either.</P><P></P></BODY></HTML> Fri, 21 Oct 2005 17:28:33 GMT https://community.cisco.com/t5/network-security/netsky-p/m-p/411493#M91422 popvalores 2005-10-21T17:28:33Z Re: NetSky.p https://community.cisco.com/t5/network-security/netsky-p/m-p/411494#M91423 <HTML><HEAD></HEAD><BODY><P>We use TrendMicro's naming of virus'. We detect the P variant in signatures 3136-3 and 3136-4 on virus file attachments ending in "scr", "pif", "cmd", "exe", and "zip" via SMTP.</P><P></P><P>In an attempt to cross reference McAfee with Trend, W32/NetSky.p.em!!.exe from McAfee looks like it might be the same as Trend's P variant, however I can not be 100% certain.</P><P></P><P>We do not have a signature for the .d.em variant.</P><P></P><P></P></BODY></HTML> Fri, 21 Oct 2005 20:06:58 GMT https://community.cisco.com/t5/network-security/netsky-p/m-p/411494#M91423 wsulym 2005-10-21T20:06:58Z Re: NetSky.p https://community.cisco.com/t5/network-security/netsky-p/m-p/411495#M91424 <HTML><HEAD></HEAD><BODY><P>But my IPS is not block all signatures W32/NetSky. How i can do?</P></BODY></HTML> Wed, 02 Nov 2005 19:00:49 GMT https://community.cisco.com/t5/network-security/netsky-p/m-p/411495#M91424 popvalores 2005-11-02T19:00:49Z