I received Hoax emails from Hallmark and IKEA that appear to be some form of a virus. I have been searching for a fix to remove the virus from my computer. My GoupWise email locks up and shakes. This is the biggest symptom I have noticed so far. I have looked in Sophos and Sypbot for a fix with no help. I have noticed that many other Universities and School Districts are having this systme wide problem.

Janet Milenbaugh, January 2009

Wish I could tell you how to fix this monster, but I can tell you more symptoms. It has blocked my ability to get windows update, and also will not let me system restore to a previous saved date. I haven't noticed that it is using my address book, but will put the blockers into the address book to confuse it. I tried booting in safe mode, and deleting the svchost.exe files which constantly come back with each reboot. The system just crashes without those files. I ran the Symantic fixes for netsky and vundo, and they cannot detect the virus. I had Trend Micro protection installed for 30 days and it could not quarentine it. I have now installed Norton 360, and it doesn't find it either. Nevertheless, I am constantly plagued with unwanted popups, many of which require numerous clicks to dispurse. H-E-E-L-L-L-P!!

TRAVLMAN, February 2009

It appears to be Netsky or Winfixer/Vundo related

Try these instructions, it is more likely to be WinFixer as everything i read about it points to its behaviour.

Much to long to post here

see http://capitaltechmd.com/index.php?option=com_agora&task=viewtopic&id=52&Itemid=19

Good Luck

Astrophel, January 2009

Look-up"How do i remove trojan?"from the how to mend it list, it comes down to search and destroy, sometimes the same virus may re-appear after a sweep, by slightly changing it's name to avoid scanners, and the only thing that gives away is it's file size, delete ALL files of that size.
Also good advice from Cecilia, nice one .

nrb, January 2009

to prevent the virus and others from sending emails from your machine, go to your address book
put a new address AAAAAA........., then another one ..........aaaaaaaa because these are invalid and do not have a @ sign they will not send and the virus stops there at your machine. these two address will sit at the top of your address list as a preventive measure.
check with your antivirus company for a fix it.

Cecilia, January 2009