W32.Netsky virus

[coggles]

We have Norton Antivirus 2003 and keep getting virus alerts from emails sent to us. They tend to have one to four words in them, the last one read 'you are bad'. In the last 10 days we have had about 20 (scanned, quarantined and deleted by symantic) and the virus name is 'W32.Netsky'. Is anyone else having similar problems and how can we resolve it? Thank you.

[Dave Potts]

Try here if you've been infected - http://www.sophos.com/support/disinfection/netskyb
.html

[coggles]

Once again, thanks Dave. I have read through the bumph from that link and it came up with the 'warning' about some files may have viruses etc!!! Can I safely use that link? Sorry to question it, but because of recent events, I am reluctant to download anything that may make things worse! Not doubting you - I appreciate your help. Thanks

[Dave Potts]

Yup Sophos is as trusted as Symantec and their stuff works a treat :o)

[Dave Potts]

BTW the Sophos link basically opens a program which will scan your PC for that specific worm - if you're *clear* after running it then you have nothing further to worry about from THAT worm - just don't open any suspicious emails carrying attachments. The worm W32.Netsky is easy to spot because it always looks the same - check out here http://www.sophos.com/virusinfo/analyses/w32netsky
c.html for examples of what to look for, and be careful what you open, as always. What the link WON'T do is prevent further infected emails arriving - for this you need a scanner/filter present between your pop server and your pc - but if NAV is catching them and quarantining them when they arrive you needn't really worry. It's all the things NAV is missing that should keep you awake at night :o) If you're ever bored check out http://www.majorgeeks.com/ - very useful site for shareware/freeware tools for giving trojans, worms and virii (sp?) the heave-ho! GOOD LUCK!

[coggles]

Many thanks, just got the all clear! I appreciate your help and will use that site in the future if I need to - which I hope I won't....!

[adydb]

coggles if you are using XP don't forget to create a clean restore point and delete all the others as with all viruses etc system restore can harbour it and bring it back at a later time.