enderst

yes, it was r6205. everything was up to the latest versions. windows and sas.

latest updates and tried to remove a threat and get a vc++ runtime error r6205 http://support.microsoft.com/kb/125749

i never paid attention to which updates/versions because it can be reproduced everytime every install automatically. just installed following the prompts and it updates automatically. now reboot and it will prompt to update again. not a big deal just thought it was odd because it automatically updated during the install. but you can slap around anytime you want for not using the latest installer sorry for that. without the version in the filename i didn't realize i had an old version.

after installing i let it run updates and i manually run updates. manually running updates doesn't find more updates. now if i reboot viola there are updates. i can reproduce this every install. so maybe request a reboot or add the updates to the program/installer since they look very old.

comes back after reboot ----------------- SUPERAntiSpyware Scan Log https://www.superantispyware.com Generated 05/01/2009 at 03:32 PM Application Version : 4.26.1002 Core Rules Database Version : 3874 Trace Rules Database Version: 1822 Scan type : Quick Scan Total Scan Time : 00:07:36 Memory items scanned : 415 Memory threats detected : 2 Registry items scanned : 389 Registry threats detected : 8 File items scanned : 4229 File threats detected : 2 Adware.Vundo/Variant-MSFake C:\WINDOWS\SYSTEM32\NNURQKK.DLL C:\WINDOWS\SYSTEM32\NNURQKK.DLL Trojan.Downloader-CREW C:\WINDOWS\SYSTEM32\WQPJPMRN.DLL C:\WINDOWS\SYSTEM32\WQPJPMRN.DLL Adware.Vundo/Variant-Joke HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8AE19691-42E3-4613-877A-21F509B22FFA} HKCR\CLSID\{8AE19691-42E3-4613-877A-21F509B22FFA} HKCR\CLSID\{8AE19691-42E3-4613-877A-21F509B22FFA} HKCR\CLSID\{8AE19691-42E3-4613-877A-21F509B22FFA}#Version HKCR\CLSID\{8AE19691-42E3-4613-877A-21F509B22FFA}#Flags HKCR\CLSID\{8AE19691-42E3-4613-877A-21F509B22FFA}\InprocServer32 HKCR\CLSID\{8AE19691-42E3-4613-877A-21F509B22FFA}\InprocServer32#ThreadingModel Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Notify\ivyrszdg ------------------------------------ any ideas?

might be a damaged userinit.exe might try this guide - http://thinkinginpixels.com/quick-fixes ... -off-loop/ i know loop is in the link but i've used this on several others that don't loop and some like your description with success.