"Red X" your computer is infected popup in taskbar

[vanilla_rice]

I've tried so many things to remove this virus, usually i can remove it temporarily by deleting this regenerating file in c:\ called winstall.exe. and then doing a virus scan with ewido_micro but iit always comes back after a week or so!

Whenever i run a virus scan a file comes up that looks similar to this:

Name: Path: Risk:
Downloader.Agent.tc [1596] VM_003A0000 High

and the virus scanner is unable to remove it!

any help GREATLY appreciated.

 

[howard_hopkinso]

First. Go HERE and follow the instructions.

Second. Go HERE and have your computer scanned.

Third. Go and read both these threads by RBS. Follow all the instructions exactly.

How to remove Trojans and its ilk! and How to remove Begin2search / coolwebsearch and other nasties.

Then see. How to post your Hijackthis log-file as an ATTACHMENT.

Only post a HJT log, after doing the above.

Regards Howard