when on-demand scan finished, got these 3 in addition to my thread starter post:

c:\WINDOWS\SYSTEM\ActiveScan\pav.sig(Win95:Matyas)

c:\WINDOWS\SYSTEM\ActiveScan\imscan.dll(too quick to press continue scan, forgot to look at virus name…scratch this, when scan finished, reported Win32:Kuang2)

c:\WINDOWS\SYSTEM\pav.sig(Win95:Matyas)

(plus from previous post c:_RESTORE\TEMP\A0066391.CPY win95:matyas)

like i said, have not taken any action on these 4 files (either delete,repair,move to chest, or move/rename)

thanks for ur help (thorough scan & look in archives)