I have the virus: "Exploit-MIME.gen" & I'm using WinXP w/Service Pack
1.  Also using IE 6.0 & Eudora 5.1.1.  Everyone says virus is only in
IE 5.0/5.5 but I have it & need help in ridding it from my machine. 
It comes to me each time I attempt to retrieve my Emails.  The files
are all in the "spool" & are: RCV5EE; RCV8DF; RCV8E6, etc. (all
temporary files).  Please advise WinXP windows instructions or other
instructions to knock it out & keep it out.  Thank you.  *Bill*

---

Request for Question Clarification by snapanswer-ga on 13 Oct 2002 10:01 PDT

What anti-virus software are you using?  The virus "flavor" you are
reporting is a generic indication of a technique used by the virus. 
This technique is associated with Nimbda and Klez virus strains.

In any event, know which software you are using to generate the
warning message will assist a researcher in looking into proper
removal instructions for your situation.  Or, it may assist in finding
any know "mis-identification" of a virus as it relates to Eudora.

---

Clarification of Question by jabby1234-ga on 14 Oct 2002 09:18 PDT

I'm using McAfee Virus Protection.

---

Request for Question Clarification by mistajon-ga on 25 Oct 2002 22:52 PDT

jabby1234-ga,

Are you using McAfee VirusScan RETAIL or McAfee.com? Does the shield
have an M with a circle or a SHIELD. If you right click on the SHIELD
please click on About and tell me the version number (5,6,7?)

Best wishes,
mistajon-ga

---

Request for Question Clarification by mistajon-ga on 29 Oct 2002 05:09 PST

jabby1234-ga,

Appears you are using McAfee VirusScan Online (mcafee.com). Good, you
are using 4230 which is the latest virus sig file. Can you please try
a full scan on your PC by following the instructions from this website
: http://www.mcafee.com/support/onlineservices/faqs.asp?faq=222

Please let me know how you go.

Best wishes,
mistajon-ga

I'm using McAfee Virus Control.  Each time I "attempt" to retrieve my
Emails from Eudora 5.1.1, I get the "MIME Virus."  I can "send" Emails
but cannot "receive."  Please advise.

Sorry that's as far as I'm going. I _could_ solve the problem easier
by getting a copy of MVC and Eudora and getting someone to send me a
trojan, but this is too much work for free :)

My McAfee Virus is the "Red Block" w/th "M" initial.  The "Build is
4.4.11" withe a "DAT 4.0.4230."  Thank you.  *Bill*

Hi,
 You have a virus!..Ok..since, being a network engineer, I have little
faith in M'caffee, go to www.sarc.com and download the following
removal tools....w32 badtrans...w32 nimda..and the most likely
culprit...w32 klez. Ok here'thetricky part...before running any of
these tools you MUST be in safe mode....do NOT run them unless you are
in safe mode. To enter safe mode in XP, press f8 as soon as you see
the OS loading {the scroll bar across the bottom of the
screen}..select safe mode. boot up and run each of the removal
tools..virus gone...if you need more details, such as editing the
registry, let me know...best of luck

I've run my "Virus Scan" & it went very well.  Machine is working fine
now with no pop-up notices as previously experienced.  Thank you for
all of your help.  Peace.  *Bill*