User has NetSky.P virus yet scan came up empty???

[Drew888]

I am using Symantecs removal tool and under my admin profile or his the tool comes up with no virus found.

In Outlook there is a reply to an e-mail he never actually sent indicating that it was blocked because it found the NetSky W32.Netsky.P@mm!enc virus.

Can I assume he sent a virus or is this e-mail itself trying to deliver the virus?


Drew, (forced into IT, and knowing next to nothing

I appreciate the help.

 

[sawedoff]

Spoofing is the processes of sending an email (often to deliver a virus) that looks like it came from someone else. Sounds like the spoofer was successful in delivering the virus, and making it look like your user sent it. There is almost no defense against this, other than to keep your email address out of the spoofer's hands, which means out of the public eye. Not always easy to do and still deliver your service and /or product.

Sawedoff

 

[Drew888]

Thanks!

He had no infeced files, I looked for them manually, and the sever is clean so...

he just deleted (without opening)

so far so good