w32.netsky.p@mm!enc

[masstechteach]

Ok, here is the situation. I have a client that gets the message that the w32.netsky.p@mm! enc virus is on her computer when she tries to access her email and will not let her download her email. I've run the fixit tool provided by Symantec and it said the virus was not found on the computer. I've done this 3 times, and each time it says the virus was not found. I did the manual removal as well that Symantec suggests on their website and found nothing. My question is: why is NAV telling me that the virus was found on the computer when the fixit tool tells me it is not? She is using SystemWorks 2003 Standard.
Thanks.

 

[aquias]

Is the virus found on her system or in the E-Mail she's trying to download? It sounds to me more like one of her messages are infected....

 

[masstechteach]

To tell U the truth I'm not sure. I have a feeling it is in the email she is trying to download, but NAV was unable to clean or delete it so it won't let her open any of the mail. She has Verizon and needs to get on their server to check her mail so she can delete it. What I don't understand is if the defs are up to date and this worm has been out for a while why can't NAV clean it or delete it? Any clue?
Thanks.

 

[aquias]

http://securityresponse.symantec.com/avcenter/venc/data/enc.detection.html

This is a brief walk through of how to resolve this issue using Outlook. This worm is capable of self launching, what may be happening is that it is attempting to launch, NAV is catching it but the file is in use and cannot be cleaned.

With extreme care and caution, I would suggest trying the link (even if it means temporarily setting her up to run in Outlook with her Verizon account).

 

[masstechteach]

Thanks Aquias,
I will try this and let U know if it works.

 

[SimpleJohn]

I think that the problem is that the file on her Mail Server is infected
and when she tries to download it, then NAV finds the virus and Alerts.
Hope it's an one time event, otherwise she's should stop using the internet
and try join the wsop 2005, better chances there...