IT Employment

that's it.

use this link http://www.checkpoint.com/alerts/netsky.html

Here's some information on this virus, along with a link at the bottom for a removal tool.

http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky.p@mm.html

Just so you know, this virus has it's own SMTP engine, therefore you probably have an infected computer that is sending to your own internal computers.

The fact that you say that some of your computers are not getting their virus updates, those are the first computers that I would check, as they are more than likely the culprits. The reason is that they are probably infected with something that is disabling the AV which will allow for further propagation of the virus.

Lemme know if you need any help, or if this works for you.

Mrafrohead

I was having a similiar problem. Make sure you have Symantec Antivirus set not to try to fix the file. Set it to delete or if it can't to quarantine. When it tries to repair the file seems to be when infection can occur, if it can not succeed.

This worked for me.

being that the virus is coming in through email, why don't you try and stop it at the mail gateway/smtp level as opposed to even letting it reach your desktops. my network is setup so that we are running GFI on our SMTP gateways, then we are running symantec mail security on our exchange boxes and finally we are running norton's corp 8.1 on all workstations. GFI does a great job of blocking netsky IMO. Not sure what your setup is like but you didn't mention any type of filter at the mail server level, hence my suggestion. hope it helps.