From: <betty889125@hotrmailnospam.org>

Dr. Lippman ? It is dave {BTW: My last name is lipman :-) }

| Trend and Sophos found no viruses on my system partition, although Sophos
| did mention when used in safe mode:
|
| Aborted checking: "OE\Data\Sent Items.dbx - appears to be a 'zip bomb'"


It considers large databases and compressed files and "Zip Bombs" and can be ignored. There
is a NEW switch parameter I can implement that I can use to avoid this message,


|
| McAfee and Kaspersky stalled on the database folders in Outlook Express and
| Thunderbird, respectively, so I exited the program and couldn't run those
| two yet. I may just run them on the Winnt system directory. I stopped
| McAfee because it appeared that each dbx file was taking an hour to scan in
| safe mode (they're quite large database files). I'm going to have use
| McAfee to scan one directory at a time.
|
| I've just run Sophos, Mcafee (aborted) and Kaspersky (mode) in safe mode.
| I'm going to run them in full boot mode later.


You have to have patience. Let it run over night.


|
| Hopefully the keylogger described in a previous post is completely gone (by
| using Regseeker and Reglite and deleting all instances of it in the
| registry).
|
| Other questions:
|
| 1) Should I download a trial version of AVG and use that once as a check?


AVG has a free version but I suggest AntiVir instead as a fully installed anti virus
application.


| 2) Will I need a Rootkit revealer and Kaspersky removal tool to see if
| Kaspersky attached an attribute to my files, as someone previously posted?


No. Use a RootKit remover like Gmer if and only if you know you have a Rooted Trojan.


|
| 3) This link you have for the bootdisk NTFS4DOS seems to be outdated:
|
| http://www.datapol-technologies.com/dpe/freeware/
|
| Can you recommend another site? I was going to create the 4 disk set, but
| I was wondering if I could just use an emergency repair disk to boot up,
| and then just use the c:\cd AV-ClS command and run the bat file.
|

There is apparnently a change to this URL. I look into this.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm