OK. I d/l hijackthis but i didn’t use it yet, but i think i got rid of it now. i found two programs that were created on the day i got the virus, and deleted them, after checking to see what they do of course.

C:\WINDOWS\winini.exe - opens IE and starts the default dial-up connection.

C:\WINDOWS\test.exe - this seems to be the program that generates the virus.

I deleted them yesterday afternoon and rebooted the computer a couple of times and haven’t gotten any more virus alerts.

A tone of text files were also created at the same time stamp as the two programs. Some of them contain system info gathered by the virus. All where found in C:\WINDOWS

tsoc.txt
tabletoc.txt
ocmsn.txt
ntdtcsetup.txt
netfaxocm.txt
msnqinst.txt
msgsocm.txt
MedCtrOC.txt
imsins.txt
iis6.txt
FaxSetup.txt
comsetup.txt

I left these as they were till I figure out which can be deleted.

Don