From: "David Arnstein" <arnstein@panix.com>

| I updated Adaware and ran it today. It complains about some registry
| entries that define a service named ip6fw. The description of this
| service (in my Windows registry) is "Provides intrusion prevention
| services for a home or small office network."

| Adaware classifies these registry entries as an installation of
| Win32.TrojanDropper.

| One additional oddity. I easily found the registry definition of this
| service in HKLM\SYSTEM\CurrentControlSet\Services\ip6fw. However, when
| I run Windows MMC panel My Computer\Manage\Services, I cannot find
| this service!

| I hesitate to blow away this service from the registry. Perhaps
| Adaware is making a mistake.
| --
| David Arnstein (00)
| arnstein+usenet@pobox.com {{ }}
| ^^


It is a hidden RootKit service and should be removed ASAP !

You can use GMer or maybe CatchIt by Gmer or someother anti rootkit utility.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm