Expert: Lorry - 1/12/2006

Question
I have up to date antivirus software (Nortons & SOPHOS)that detected the w32.Netsky.K@mm in an e-mail.  The e-mail & attachement was deleted.  I have run a full in depth system scan and get told there are no viruses.  However I continually get alerts popping up from my virus software advising a virus has been detected with an object name of C:WINDOWS\TEMP\tmp2216.tmp (or a variant).  It also states the virus was unable to be repaired, deleted or access was restricted.  I'm running XP home and have turned off system restore but still get the messages.  How do I get rid of it.

Answer
Hi Marcus,

Are you running both Norton AntiVirus and Sophos at the same time? Hope not, could cause a conflict. To verify there are no viruses on the computer, I would suggest that you go to:

http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

Click the GO button, then under Virus Detection, click Start. You might be told that you need to download and install ActiveX Contols for the scan to work, answer Yes.

Write down exactly anything it finds, then go to: http://sarc.com/  and do a search for what was found. Symantec usually has a removal tool and/or directions for removing manually.

If Symantec finds the W32.Netsky.K@mm, go to the following site for information on and a removal tool:

http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky.k@mm.html

Hope this helps!
Lorry