I had posted this in the win9x forum, i didnt see there was a virus section & thought it may be of interest here.. After seeing this posted here a couple times it is now confirmed, it IS a virus. I got this info from Sting at http://www.amazingtechs.com Datom.A virus poses as Microsoft update Windows users are being warned to be on the lookout for a virus disguised as 'copyrighted Microsoft code' and claiming to be a Windows update. One expert has even warned that the Windows worm, Datom.A, "could mark an evolution for viruses' modus operandi". The worm may arrive as an email purporting to be a Microsoft update, but it can also spread through open network shares. The actual worm itself consists of three components: MSVXD.exe, MSVXD16.dll and MSVXD32.dll, created using Borland C++. "Taken separately, these files cannot be considered as malware, but together they form a pretty malicious code," said Costin Ionescu, virus researcher at BitDefender. Aside from dropping copies of itself in all subfolders and network folders, experts have said that the worm may mark a significant evolution in virus coding because of the unusual tricks it uses to hide itself. Relevant strings of characters are stored in an encrypted format in the virus files in order to avoid disassembly and analysis, and the virus also uses a few anti-debugger tricks. The worm uses another trick to make itself 'invisible' in the registry and kills personal firewall Zone Alarm if it is found running, before attempting to connect to the Microsoft website. It is also thought that the worm tweaks the registry and modifies the default application that opens .html files - presumably a web browser. But it is unclear exactly why it does this or why it tries to connect to Microsoft's website. The actual article was copied from site below. http://www.vnunet.com/News/1133455

My Zone Alarm kept disappearing from the task bar, just disappear while online. McAffee would pick up nothing, ZAlog.txt would show nothing.

VLW, That sounds like you DO have a trojan anyways & someone is shutting it down for you. (purely my guess) OR i guess it could be this Datom virus... If it is this one you will see MSVXD.exe in your MSCONFIG> WIN.INI under WINDOWS "RUN" There are some viruses written that wont let you download updates for your AV. (McAfee.. Norton) I would recommend doing an online scan here. http://housecall.antivirus.com/housecall/start_pcc.asp Good luck Speedy

Heres the removal tool for the virus. http://www.webattack.com/newapp.php?id=105040

w32.datom.worm infects this file, norton antivirus, and macafee detects this virus but they cannot remove it.