General discussion

Locked

w32.netsky.Pmm!enc viruses!!!! Help!

By chrisu ·
Ok. So I've been battling the netsky virus for over 4 months! I'm running Symantec Antivirus Corporate Edition 8.1 on my Novell Netware Network. Good thing is that the software is actually "catching" and quarantines the infected file. The central quarantine location is my pc, which I then queue these infected pc's for an automatic distribution of virus definitions. Sometimes they are successfully installed, unfortunately most times the message indicates "Not Installed". The viruses are coming in through our email; we are using Netscape Ver. 7.01, which locks up the entire inbox, which means we lose all our email. This worm keeps getting in! No attachments are being opened, it is a straight infection upon delivery of email!
Has anyone had this problem? I could sure use some help! Don't know if it is a netscape problem, pc problem or what! We have Windows 98, 2000 and XP machines. HELP!!!!

This conversation is currently closed to new comments.

7 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

McAfee

by ITgirli In reply to w32.netsky.Pmm!enc viruse ...

that's it.

Collapse -

ITgirl

by frank In reply to McAfee

not sure what it girl is tryin to say. Just see one post Mcafee and then "that's it.

Collapse -

McAfee! McAfee! McAfee!

by ITgirli In reply to ITgirl

That is what I'm trying to say. any virus that's gotten in our system has been caught by McAfee AVERT "Stinger". some people just don't get it.

Collapse -

or

by voldar In reply to w32.netsky.Pmm!enc viruse ...

use this link http://www.checkpoint.com/alerts/netsky.html

Collapse -

...

by mrafrohead In reply to w32.netsky.Pmm!enc viruse ...

Here's some information on this virus, along with a link at the bottom for a removal tool.

http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky.p@mm.html

Just so you know, this virus has it's own SMTP engine, therefore you probably have an infected computer that is sending to your own internal computers.

The fact that you say that some of your computers are not getting their virus updates, those are the first computers that I would check, as they are more than likely the culprits. The reason is that they are probably infected with something that is disabling the AV which will allow for further propagation of the virus.

Lemme know if you need any help, or if this works for you.

Mrafrohead

Collapse -

viruses

by frank In reply to w32.netsky.Pmm!enc viruse ...

I was having a similiar problem. Make sure you have Symantec Antivirus set not to try to fix the file. Set it to delete or if it can't to quarantine. When it tries to repair the file seems to be when infection can occur, if it can not succeed.

This worked for me.

Collapse -

something to try

by sagitarian76 In reply to w32.netsky.Pmm!enc viruse ...

being that the virus is coming in through email, why don't you try and stop it at the mail gateway/smtp level as opposed to even letting it reach your desktops. my network is setup so that we are running GFI on our SMTP gateways, then we are running symantec mail security on our exchange boxes and finally we are running norton's corp 8.1 on all workstations. GFI does a great job of blocking netsky IMO. Not sure what your setup is like but you didn't mention any type of filter at the mail server level, hence my suggestion. hope it helps.

Back to IT Employment Forum
7 total posts (Page 1 of 1)  

Related Discussions

Related Forums