I came across this tool, "Stinger", in another forum, Juanita. It looks promising: http://vil.nai.com/vil/stinger/ <<<EXCERPT>>> McAfee AVERT Stinger Stinger is a stand-alone utility used to detect and remove specific viruses. It is not a substitute for full anti-virus protection, but rather a tool to assist administrators and users when dealing with an infected system. Stinger utilizes next generation scan engine technology, including process scanning, digitally signed DAT files, and scan performance optimizations. Download Stinger.exe v2.2.5 [769,031 bytes] (5/04/2004) or Download ePOStg225.Zip EPO deployable version (for EPO administrators). Instructions for EPO 2.5X and EPO 3.X are available. This version of Stinger includes detection for all known variants, as of May 04, 2004: BackDoor-AQJ BackDoor-JZ Bat/Mumu.worm Exploit-DcomRpc IPCScan IRC/Flood.ap IRC/Flood.bi IRC/Flood.cd NTServiceLoader PWS-Narod PWS-Sincom.dll W32/Anig.worm W32/Bagle@MM W32/Blaster.worm (Lovsan) W32/Bugbear@MM W32/Deborm.worm.gen W32/Doomjuice.worm W32/Dumaru W32/Elkern.cav W32/Fizzer.gen@MM W32/FunLove W32/Klez W32/Lirva W32/Lovgate W32/Mimail W32/MoFei.worm W32/Mumu.b.worm W32/MyDoom W32/Nachi.worm W32/Netsky W32/Nimda W32/Pate W32/Polybot W32/Sasser.worm W32/Sdbot.worm.gen W32/SirCam@MM W32/Sober W32/Sobig W32/SQLSlammer.worm W32/Swen@MM W32/Yaha@MM -------------------------------------------------- This one should make your task easier! Armando 8) PeoplePC Online A better way to Internet http://www.peoplepc.com VIEW ARCHIVES @ //www.freelists.org UNSUBSCRIBE by sending email to triadtechtalk-request@xxxxxxxxxxxxx with unsubscribe in the Subject field. To VIEW/CHANGE your subscription status go to //www.freelists.org/webpage/triadtechtalk Contact List Owner - dbcfour@xxxxxxx