I finally found Backdoor.mard on a trojan virus list. My AVG log shows it was in my
mirc32.exe file when detected and eliminated by AVG. Since I still have the WNK*temp
problem, I don't there was a connection with that particular virus.
>Date: Thu, 30 Jan 2003 00:33:07 -0800
>From: "Paul M. King" <peking7@...>
>Subject: Re: Windows temp file
>Following your instructions, I removed SYMVNT.386 from my registry. It did the trick
>and the DOS screen no longer appears in my boot up sequence.
>I installed Grisoft's AVG after I uninstalled Norton SystemWorks 2002. AVG immediately
>found, isolated, and then deleted a trojan horse virus containing the letters MARD from
>my Mirc files. Norton did not find this virus. I rarely use Mirc these days, perhaps once
>a week for 15 or 20 minutes. I've been unable to find any reference to the MARD virus
>in lists on the web.
>However, I have not found the answer to the zero-length WNK*.temp files that continue
>to breed in C:\Windows\temp. I simply delete them after each computer session.
>I like Grisoft AVG and unless I can be convinced that Panda does a more thorough job,
>I will make no change. Perhaps Panda or McAfee have developed an anti-virus def
>that AVG doesn't have and that would change my mind if it's specific to my problem.
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com)
Version: 6.0.445 / Virus Database: 250 - Release Date: 1/21/03
[Non-text portions of this message have been removed]