hi all, basically my computers are not likely to be attacked by any virus, but recent recovery (done early last mth) has brought some iframe viruses. usually, what i saw is during the start of mozilla firefox. it blocks site jl.chura.pl/rc yeah i found the solution by modifying the hiddenwindows.html in res folder. last mth it works, but yesterday it appears again without any obvious source. i delete the row <iframe>, but after i close it, it appears again. it begins when i was watching dvd suddenly my C:\windows\temp folder is infected. after that, the firefox start begins to show "access to iframe jl.chura.pl is blocked" i am using avast home free edition with updated virus database, anyway. so since im not a huge fan of iframe trojan, i boottime scan every single file in my computer, delete some useless crap. but it didnt work, i tried enabling UAC back for security purposes. after next reboot so the com surrogate has stopped working (i am using vista 32 home), and some viruses found again in C:\windows\temp. i delete those files manually, and the firefox iframe issue has been gone. but randomly, i got those messages that viruses in C:\windows\temp appears again, but with different name. here is the attachment of what is my antivirus logging. as u all can see, i've been clean from 30/06 (ignore the autorun.inf, its my friend portable disk) and this morning, many attacks are shown. from the log, im pretty sure the host of the viruses live in windows\temp if i has to recover the computer, i can do it, just i doubt it may appear again after recovery. help from anyone with ideas on this are appreciated. thank you!