Dear all

I have also been having some problems with (I suspect) the win##.temp.exe virus. Every so often I get a message from Norton Internet Security saying an attempt has taken place to access a DNS from Win##.temp.exe file.

In the Windows/Temp folder there are around 500-600 random Win## files.

I have read the previous threads on this and have done everything explained so far (ie running Crap Cleaner, ATF Cleaner and Ewido antispyware) and are not any closer.

A Kaspersky online scan showed the presence of:

1) Backdoor.Win32.IRCBot.si
2) Win32.klone.g
3) Win32.dialer.pz

I am not familiar with Hijack This, but would really appreciate any help to sort this out as I am tearing my hair out!!

Currently am using Norton Internet Security and Anti Virus 2005 with Windows Defender. Have also got Ewido installed since this problem.

Please can somebody help me!

Many thanks

Uninstall NOrton for starters. If kapersky found viruses, won't it clean it for you? Search for the registry entries and delete them.

I was only using the Online scan of Kapersky, and each time it ran, it crashed. All I could get out of it was the log of what it had found and there was no option to delete/clean them.

Norton AV doesn't pick them up, and the Firewall is the only thing stopping them from connecting to the internet (it would seem).

Thank you for your interest!