hm… weird… yesterday it wasn’t there but today somehow he appeared again… so I’m asking for help… I’m using XP with SP1, avast home edition 4.5 VPS 0451-2. the virus was first found in temporary internet files, then he appeared in the windows folder. in the temp files the filename was main[1].exe and in the windows there were multiple filenames lile lb8m1knfzu.exe or lud2gsa13l. exe. When the avast had discovered this virus i moved it to the chest, but as d_wtkns says the virus respawns when i connect to the internet…