Virus problem
 

I got a virus that keeps popping up little windows on my desktop asking "Poker?", or "Casino". You click cancel and it brings you to a web page that is powered by google. the url is usually www.easysearch.com, and sometimes www.formyuser.com. They are both the same page. Also If i try to go to one of my bookmarks it takes me to one of those pages.

I ran spybot, Adaware, and NAV. Spydob and AW got the same usual thing. But NAV got about 13 viruses that it could not fix, so i quarantined them and it deleted them. Now when i run Norton it says no immediate threats.

finally, sometimes i got a dangerous script alert. Its usually two files called: iau.exe or msxmidi.exe

I looked those two files up on google and it seemed like they were regular functioning files for windows, but i got confused with everything they were saying.

If you got any suggestions, thanks in advance.

It's not a virus, it's spyware, and it sounds like you've got one of the REALLY nasty heuristic ones.

You can attempt to manually clean it but with a hijack that severe you may be looking at a reformat or using the System Restore wizard to rollback the computer.

Anybody know of any good browser hijacking detection/removal programs?

Please check out http://www.tfproject.org/tfp/showthread.php?t=48137 since it's a thread discussing execlusively (sp) on how to get rid of spywares/virus as well recommended spyware removers.

I recommend spyboy search and destroy and Ad ware.

Also, check your startup configuration (go to run->cmd->msconfig) and click on to startup tab and uncheck anything that doesn't seem right.

After checking your startup list, check your running processes and lookup what each of them does over (Task List Program descriptions)

To get rid of some of the spyware that re-installs itself:
Turn off system restore
Re-start in safe mode
Run Ad-Aware, SpyBot, and any other spyware removal tools you have
Restart in normal mode
Turn system restore back on(if you use it)
This will usually get rid of those that hide in system files that are backed up by system restore. This has worked for me on several difficult removals.
Got this tip from the AVG Forum

http://www.tfproject.org/tfp/showthr...hlight=spyware

I made that thread a bit ago and I feel that it is more comprehensive than the previous thread discussed.

Definitely look into one called CWS shredder, it should be mentioned in the links the guys have posted here. It's one of the lesser known adware removers and I think it gets stuff that Ad-Aware and Spybot have trouble with.