Virus Removal Tool

http://www.spywarenotice.com/2008/01/the-egodktf-toolbar-how-to-remove-the-egodktf-toolbar/The Egodktf Toolbar Remover

The Egodktf Toolbar is the latest clone of the Zlob spawned Spyware toolbars. The Zlob virus writers produce a new toolbar every week now. How they arrive at these obscure names for their toolbars will never been known. The Egodktf Toolbar has the same exact functions as the previously named The Epxonwo Toolbar. Common distribution method of The Egodktf Toolbar is by the Video Access Codec, Media Rover Codec v1.6, orMedia Star trojan all hosted at iswebsoft(dot) com.

The Egodktf Toolbar displays fakes alerts, warnings and links to rogue anti-spyware products. Four icons and text are present within The Egodktf Toolbar – Remove Popups, Scan Spyware, Security Test, & Spam Protection. All icons lead to rogue anti-spyware products.

Another common symptom of The Egodktf Toolbar is a thin yellow bar that appends itself to the top of the search results page. The message: “Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”. The Egodktf Toolbar will also drop Egodktf.dll into the system registry.

Removal
http://www.spywarenotice.com/2008/01/the-egodktf-toolbar-how-to-remove-the-egodktf-toolbar/
———————–
W32/Vbbot
Malware type: Backdoor. Aliases: Virus.Win32.Fontra.c (Kaspersky), W32/Vbbot (McAfee), W32.Fontra (Symantec), Worm/Fontra.C (Avira)

W32.Fontra
When W32.Fontra is executed, it performs the following actions:

1. Searches for peer-to-peer shared folders by scanning registry keys and files associated with common peer-to-peer applications. The following applications are targeted:

* eMule
* Kazaa
* Shareaza
* eDonkey2000
* Gnucleus
* Morpheus

2. Infects all executable files in the shared folders, if valid folders are found.

3. Sends information about the operating system and infected files to the following remote location:

69.61.59.114

4. Attempts to download and execute files from the following URL:

[http://]traff4all.biz./[REMOVED]

5. Creates the following subkey key to store information about the infection:

HKEY_CLASSES_ROOT\[RANDOM CLSID

Removal
http://www.symantec.com/security_response/writeup.jsp?docid=2006-051116-5811-99&tabid=3
——————
Antivirus: BitDefender Online scanner – will scan and remove threats.
Anti adware/spyware: Ewido Online Scanner – will scan and remove threats.
http://www.bitdefender.com/scan8/ie.html
http://www.ewido.net/en/

Can also be used in "Safe Mode With Network".
http://www.geocities.com/coolno74/AntiVirusScan.html

Try Online scanner GarbageClean http://www.GarbageClean.com it does pretty good cleaning.