Extra Strength Virus!

[webgs]

I'm on Win XP Pro and have a nagging problem. Here's list. Any help would be appreciated:

1. A file called "xz.exe" lives at c:\ no matter how many times I delete it, it comes back

2. A folder called "upload" gets created on boot and gets populated with hundreds of zip files that contain viruses

3. "Media Access", "ShopAtHomeSelect Cash Back" and "Win-Tools Easy Installer" entries are added to my "Add/Remove Programs" list

4. I can no longer run "regedit" from the "start -> run" command.

5. My pc is running noticeable slower.

I've used Spybot, Adaware and I've run Norton AV. I've also gone through the registry several times deleting the entries but they all come back. I'm at my wits end over this!! Please send help!!!

 

[crobg]

Did you disable system restore before doing your fixes. If you don't XP restores the problem files and your problems start all over again.

Have you run HijackThis yet? FAQ faq760-5547 has a link to a site where you can download it. The site will also analize the log. I would post the log here as well as there are many people willing and more than able to help find the problems.

 

[webgs]

I did disable system restore. I just ran HiJackThis. I found a few more items. One that I forgot to mention in my post is "p2pnetworking.exe". I delete reg entries and the exe but it still comes back every time.

I've just deleted some stuff with HiJackThis and I'm going to reboot to see what happens.

Thanks!

 

[bcastner]

It is not a virus.

Remove Kazaa, eMule or other P2P filesharing applications.
Download, install and update the Microsoft Antispyware Beta, and do a deep systm scan option.

See faq608-4650

 

[webgs]

Hi crobg and bcastner,

I tried what you both suggested and more. Still had the same issue. I figured that it would only be a matter of time before the issue got worse. I took the plunge and rebuilt the system from scratch. I've decided to use the Microsoft Antispyware Beta full-time. It's very good! The system is running perfect now.

Thank you both for your insight!