mcafee acting funny...

[DjM]

Any chance your running Windows ME ??

[DjM]

OK we can deal with the Windows ME problem later (if you are running it).

Lets start with CIH virus thing. You said LoveLetter was detected on you PC. A variant of the virus writes a line-by-line hexadecimal file and saves it as \Windows\Cih_14.exe. This file contains a dropper for the CIH virus. This may explain why your AV thinks your infected and the removal tool doesn't. Look for this file (it may be hidden) if you find it, delete it and empty your trash.

After you have done this, come back here and fill us in, and we'll move forward from there.

[bucket]

HeyRyan:
If you attempted to view the famous J-Lo attachment, this Symantec write-up might interest you:
http://securityresponse.symantec.com...eletter.a.html

[fr0z3n]

*rain man voice* yeah, yeah definatly get the update
yeah! gotta get the update. no not from here from cincinatti kmart. hahaha! naw thas a joke.

um just update: your best bet.

[Ryan Nyquist]

I have reinstalled and scanned with mcafee. it did not detect anything. it was probably just a problem with a deleted mcafee program file or something. what about windows me? and ya i am running it

[bucket]

HeyRyan:

First, I dunno much (anything) about McAfee, which you use.

I do know that Norton 7.0 (2001) will not detect a virus lurking in the Win ME System Restore folder. McAfee *might* be the same. You might want to check the problems associated with your version of McAfee.

If the problem occurs again, you might want to try dumping the contents of the System Restore folder. Good luck.

[Ryan Nyquist]

McAfee does scan the C:\_RESTORE folder (system restore). It will not delete or clean any infected files in it. You have to run a scan in DOS to clean any infected files that are in the C:\_RESTORE folder. I have had to remove several trojans using a DOS scan (bo2k, netbus 2.10) because I could not repair any infected files in the restore folder.