I just suffered from this........cel you're gonna have toeither do the below steps of it all else fails, wipe your shit......it's a d/l trojan that keeps replicating itself everytime you remove each instance of it........it might be deploying 3 particular Trojans: Trojan.KillAV (Anti-Virus), Trojan.KillFW (Windows Firewall), and Trojan.OpenIP (Internet Port).......then it opens up the gates for more of them to get in with those three in your system......so here's what you can do:
***Make sure you have d/led Spybot w/all updates and your virus definitions are up to date before doing this***
1. Shut your comp down fully
2. Disconnect yourself from the internet
3. Restart in safe mode (Keep hitting F8 until the selection screen comes up)
4. Run anti-virus and do a full scan of all hard drives
5. Delete the infected files
6. If you have a protected recycle bin, empty it
7. Run Spybot and let it catch any leftovers
8. Set Spybot to run again at system startup
9. Restart in Safe Mode again and let Spybot run again
10. Once done, restart in normal mode and let it sit for awhile and note what your system does.......
11. If you see that pop-ups are not showing up, then start your AV and note what your system does (Note: if it take a long time to start up, the do a Ctrl+Alt+Del and note how much physical memory is being used, bc if all of it is being used, then the Trojan is memory resident and you're gonna have to clean wipe your system (meaning formating, deleting/creating the partition, then reformating and loading winders)........there's my $.02......
