It's a virus or somthing malicious - help!!!

A couple of days ago I started getting this icon in my server tray. It's persistant and I can't get it to go away. I ran AVG and it turned up 2 viruses that is can't quartine or heal or deleate.

Whenever I click on the icon, it's a yellow triangle with an exclamation point in the middle, it opens a web page to different anti-virus program pages. Some of these pages are: Anti Virus Golden, spy gaurd, pest trap, and the safety home page.

Whatever it is, it has also loaded a new tool bar on my IE browser than I can not delete. I can not uncheck the tool bar in the internet options menu eithier.

Could someone pleasetell me what I can do?

Hi,

firstly dont install ANY of these products, they are all spyware.

Firstly update your virus scanner with its latest definitions. If you dont have an antivirus product then download and update AVG

Also download the following tools:
Ewido
Adaware
Spybot
Hijackthis
Smitfraudfix

After downloading these, update ewido,spybot and adaware.

Disable system restore

Reboot into safemode, press F8 after rebooting before getting the windows loading screen.

Run full system scans with your virus scanner or avg. Then run full system scans with Ewido, adaware and spybot. Make a note of anything they cannot clean (if there is anything).

This can take a while depending on the size of your hard-drive and the number of files on it. Then run smitfraudfix and pick the option "Clean". Keep a copy of its log. After this reboot back into windows and run hijackthis. Scan and then post the hijackthis log and smitfraudfix log here for us to look at. Also describe the sympthoms after running all these.

It may be valuable to print out these instructions before rebooting into safemode.

Hope this helps.
Displeaser

I downloaded the software and ran full scans with ewido and ad-aware. 207 objects with spyware and then 72 with ad-aware. Took care of it plus another mystery server which had been sitting in my server tray for about a year that I couldn't budge.

I'm definitely going to be using ewido instead of "spyware doctore". The doctor found nothiing and fixed nothing.

Thanks for the help!

Cool,

if you run into problems again, update them all (eqido, antivirus, adaware and spybot), run full system scans and then reboot and post a hijackthis log here.

Glad we could help.
Displeaser

Something else you might rememeber to keep an eye on...

open C:\ or whatever drive the Windows root folder is on... open the 'System 32' folder and from the right click menu choose "arrange icons by date"...scroll down to the bottom and look for new entries (especially those with .exe extensions) you can find the creation dates by clicking Properties from the right click menu.

many forms of malware, trojans and other intrusive items etc will be there...check the Task Manager's "Processes" tab to try and to stop any malicious looking services... sometimes you may have to start the system in Safe Mode to be able to delete these intrusions...