Hi everyone,

Our company uses Trend's ScanMail and Server Protect virus protection. The pattern and engine files on these programs are the most recent and the Trend website claims that they can detect and remove Worm_Netsky-D. It has detected this virus on one of our NT 4 servers, and although the pattern file is also up-to-date on this system, Trend finds the worm in a 'realtime scan' but cannot quarantine or delete it. I have verified that no malware applications are resident in the taskman applications or processes. I have run countless scans of both the email and file system using a systematic variation of settings and still no hit - these scans always come back stating that there was no virus found; however realtime scan picks up a new virus created email every 5 or so minutes.

The Trend steps for removal don't include steps for NT 4. The registry entries that they outline don't appear in the same location and when I perform a text search in the registry it can't even find partial changed keys that were present on our Windows 2000 server when it was infected by the NetSky-D worm.

Has anyone had faced this issue and beaten it? Your recommendations would be greatly appreciated.

Truly,
Steve B.

http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky@mm.removal.tool.html

Use this removal tool, u should be good to go....

I wish I lived in Theory. Everything works in Theory.

Try Solo antivirus from www.srnmicro.com. It should work for you. I have recommended to many of my friends and it worked great.