To: Rick Faurot who wrote (14396 ) 12/31/2000 4:30:53 PM From: mr.mark Read Replies (1) | Respond to of 110652 sorry, i didn't know what you meant. <g> no, i sure haven't discovered that virus on my machines. but because you asked, i checked the list of 48,000+ viruses that nav is protecting me against, and i found w32.funlove.4099 w32.funlove.4099(drop) w32.funlove.4099.dr w32.funlove.4099.dr 2 w32.funlove.int in fact, the only positive i've registered on either pc over about 3-4 years was a false positive involving blackice defender, and symantec later admitted that it was their mistake and released some sort of fix. re, "A friend reports it was designed to attack Norton and his Norton prog did not intercept it" ... this sounds like incorrect info, to me, rick. here's what symantec says about w32.funlove.4099 : ********************************************* W32.Funlove.4099 Discovered on: November 8, 2000 Last Updated on: December 7, 2000 5:48:12 PM PST December 7, 2000: Due to a recent decrease in world-wide infections of this virus, SARC is reducing the threat level of this virus to 3 and removing it from the "Top Threats" list. W32.FunLove.4099 is a Win32 virus that replicates under Windows 9x and Windows NT systems. It infects applications with .exe, .scr, or .ocx extensions. What is notable about this virus is that it uses a new strategy to attack the Windows NT file security system, and it runs as a service on Windows NT systems. ************************************************ in #reply-15075451 about one week ago, i noted about a half dozen removal tools that symantec makes available for free on it's site. i see that W32.FunLove.4099 Removal is on that list. btw, what type of virus protection are you using? :) mark