Netsky sends emails and spreads itself that way. You can look at the traffic in and out and you will see more going out than coming in.
Antivir works great. It finds all the netsky instances (usually many) and zaps them. It's free.
http://www.free-av.com/
