Hi Bill........... Did you see if it put an entry in your puter...........??? SOCK32 DLL is being used by the system, the worm will be able to modify this file. Thus, in this situation, the worm will add registry key to one of the following subtrees....... HKEY_LOCAL_MACHINE\Software\Microsoft\ Windows\CurrentVersion\RunOnce HKEY_CURRENT_USERS\Software\Microsoft\ Windows\CurrentVersion\RunOnce They appear to be the same but that's what I printed out............. If there isn't an entry, you must have gotten rid of the virus............ Bunny > Have used Inoculate, McAfee Virus Scan and Virus Shield and Dr. Solomon and > cannot find the virus.....Help me somebody! > > Dr. Bill > Bill@Dr-Fox.Com > HTTP://WWW.DR-FOX.COM {WEBSITE} > > > ==== NEWGEN Mailing List ==== > WHEN IS THE LAST TIME YOU THANKED CYNDI FOR HER MARVELOUS LIST >

Might try this: http://housecall.antivirus.com/housecall/start_corp.asp Rsp. Jim Allen bunny wrote: > Hi Bill........... > > Did you see if it put an entry in your puter...........??? > > SOCK32 DLL is being used by the system, the worm will be able to modify this > file. Thus, in this situation, the worm will add registry key to one of the > following subtrees....... > > HKEY_LOCAL_MACHINE\Software\Microsoft\ > Windows\CurrentVersion\RunOnce > > HKEY_CURRENT_USERS\Software\Microsoft\ > Windows\CurrentVersion\RunOnce > > They appear to be the same but that's what I printed out............. > > If there isn't an entry, you must have gotten rid of the virus............ > > Bunny > > > Have used Inoculate, McAfee Virus Scan and Virus Shield and Dr. Solomon > and > > cannot find the virus.....Help me somebody! > > > > Dr. Bill > > Bill@Dr-Fox.Com > > HTTP://WWW.DR-FOX.COM {WEBSITE} > > > > > > ==== NEWGEN Mailing List ==== > > WHEN IS THE LAST TIME YOU THANKED CYNDI FOR HER MARVELOUS LIST > > > > ==== NEWGEN Mailing List ==== > BE SURE TO SHARE WITH THE OTHER LIST MEMBERS ANY SIGNIFICANT > (OR INSIGNIFICANT) FIND YOU HAVE MADE. IT HELPS OTHERS TO PRESS ON > WITH THEIR OWN SEARCH.