Virus using our server to support an E Bay Scam site.

Our server has been infected by a virus that none of our Anti Virus programs can locate. It is apparently using our Server to Send Out a scammed Pay-Pal Web Site. Has anyone been infected like this and do you have any resources or suggestions to help locate and eliminate this virus, short of re-formatting the server?