ArenaNet Manager Virus?

Last week I got infected from a trojan and thought I cleaned it. Well, now it must have come back.

Now, when I open Guild Wars, the following window opens instead:

http://i42.tinypic.com/2qn03ya.jpg

When I click "Unlock my Account!" it pops up this:

http://i42.tinypic.com/ic7de0.jpg

When I click the Shopping Cart logo, it comes up this link:

https://secure.ncsoft.com/cgi-bin/St...ory= 4#group4

What in the world? Plz someone help me!!! It keeps popping up when opening Gw.exe!

P.S. I looked in the shortcut properties in the Guild Wars Shortcut, and its "C:\Program Files\Guild Wars\Gw.exe"

Just one question, Leet - is this a late April Fool's joke?

A "small fee" of the full price of a new copy of GW? "This money will be used for GW2"?

If this isn't a joke, it's a highly dangerous trojan that needs removal immediately.

This is not a April Fools joke... it keeps opening when I open Gw.exe and I bet it is a virus because ANET will not do this...

Any way to remove it?

I would just download a copy of MalwareBytes and run a scan in safe mode. Either that or use a program like McAfee in safe mode to check.

It would appear to be a joke but if the shortcut links to gw.exe then I wouldn't be so sure.

Please download my Anti-Malware Toolkit and get the Professional package. Then follow the directions in the PC Cleanup guide. After that, please post a HijackThis log.