You might want to try this: Have you been to the MSFT Update website before the virus got you? There were several security patches and later updates of these patches. Install them all, as recommended by Windows Update. If you are using MS Outlook, you also have to install all of their security patches, otherwise it will get in through this loop hole. I have cleaned it from one computer and I can tell you how to do it. I use Norton 2002 and they do not get to me. I am also running MSIE 6.0 and XP Home Edition on my desktop. How to clean it from your computer: 1. Run REGEDIT and go to the RunOnce section of the registry and delete the entry "kernel32=kernel32.exe" If you do not have an "Kernel32" entry here, you are not infected by Badtrans.b The actual key name is: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce 2. If you are, boot with a DOS diskette and delete the file Kdll.dll in your %system% directory as well as the file kernel32.exe Your %system% directory is usually C:\Windows\System. You will have to do this from a DOS Boot Disk because Windows will not let you do it from within Widows. Create a Startup Disk via of the Control Panel and boot with it. 3. From your Windows CD, extract the file, kernel32.exe and copy it to the %system% directory 4. Probably the best thing to do is to re-install the OS but the above catches most of the problems. Reboot. To extract a file from the installation CABS enter the command: Extract /a (starting CAB name) "file name you want to extract" (in this case, kernel32.exe) John R. Clarke For some of the best from the outdoors visit www.outdoorwriter.com This message is also virus free ----- Original Message ----- From: "Elizabeth Wilson" <[email protected]> To: <[email protected]> Sent: Thursday, November 29, 2001 8:56 AM Subject: [OHSHELBY] An apology > Sunday evening I downloaded the latest virus scan patches from McAfee; > Monday, Tuesday and Wednesday morning McAfee assured me that I was running > the latest scan and when I went through their recommended clean up procedure > (just in case I hadn't already deleted any offending files), none of the > virus-laden files showed up. Last evening, I checked the McAfee site again > and downloaded their latest patch and, BINGO, the Badtrans virus showed up. > I am now virus free, at least until the next round that McAfee doesn't catch > from the get-go. I am really sorry. > > Elizabeth D.Wilson > > > ==== OHSHELBY Mailing List ==== > The Shelby County Genealogical Society offers memberships and publications at: > c/o Mrs. Betty Bevans > 17755 St. Rt. 47 > Sidney, OH 45365-9242 > > > ============================== > Visit Ancestry.com for a FREE 14-Day Trial and enjoy access to the #1 > Source for Family History Online. Go to: > http://www.ancestry.com/rd/redir.asp?targetid=702&sourceid=1237 > > >