>We just went in and fixed an NT machine that got infected. Essentially you have to go into the registry and delete out the files the virus creates. Get a hold of the code for the virus from any of the infected files and go through it to fix the machine. We had to delete at least 2 files. If you are lucky enough and the machine got infected after the websites the virus looks at were taken down, you will have less cleanup to do. Look for regcreate in the code, it will lead you in the right direction. HTH

Thanks, I'll pass that along if I hear of any NT infections still struggling.

I'm not sure about the NTs around the agency, but our 95s are clean now. The problem with our NT machines is that the security is so tight that you can't get to the registry to fix it, even as an admin. We haven't moved many machines to NT because of problems with it, and mine was not infected. I'll hear more later, I'm sure. I'm just happy to get our poor 95 user back in business, the latest McAfee patch did the trick. She was very concerned, with no backups of most local files. She will never open one of these again, I have little doubt <s>

The only problem was trying to delete about 500 Outbox messages the user had very quickly, selecting and deleting them all before they were sent. I got about 490 deleted :)