Virus or spyware?

Pobby

I have a new{unwelcome} icon in my tool bar.It flashes between green and red.Every so often it produces a small pop up to tell me my puter is infected.Ran AVG and anti spyware software but it is still there.Any thoughts please?

Quincy_3

Has it a name?

Browntoa

souns like one of those in my signature or a variant

Browntoa

download HijackThis

www.bleepingcomputer.com/files/Merijn/HijackThis.zip

To use HijackThis, download the file and extract it to a directory on your hard drive called c:\HijackThis. Then navigate to that directory and double-click on the hijackthis.exe file. When the program is started click on the Scan button and then the Save Log button to create a log of your information.

You can then either paste the contents of the saved file to here and either Myself, Pchelpman or Alfonso can take a look for you . There are many variants of this and we need to identify the correct software to clean it

Quincy_3

Just a quickie, Have you run AVG in safe mode, it might not clear this nasty but it may find others so that a cleanish base will be a good place to start from.

Plus also the log can be looked in the meantime whilst you are performing a safe mode scan.

Browntoa

in the first instance please go to www.windowsupdate.com and download Windows Service pack 1 (sp1a) , this may take some time but will close the weaknesses in your system that allowed this to happen in the first place and it is pointless trying to clean the system without this.

If this is not a legit version of Windows (the update will tell you) then there is nothing we can really do in the long term

Browntoa

afterwards :-

HijackThis should be run from a permanent place on your hard drive. Please do this first: Go to C: and create a new permanent folder (call it hijackthis). Then put (or download - choose "save" not "run") the hijackthis.exe file in it (You must unzip it if it's zipped). You should now have C:\hijackthis\hijackthis.exe. Then run hijackthis by clicking this .exe file. By doing this, you will have backups if you accidentally remove the wrong item (running from a temporary folder these backups can easily get lost).

run a new log and post tat for us please