evemeyer Posted February 6, 2009 I purchased this program and it detected the vundo variant. It instructs to remove and restart. I have done this 5 plus times and it keeps coming back! What can I do? Unclassified.Unknown Origin HKCR\CLSID\{6D794CB4-C7CD-4C6F-BFDC-9B77AFBDC02C} HKCR\CLSID\{6D794CB4-C7CD-4C6F-BFDC-9B77AFBDC02C}\InprocServer32 HKCR\CLSID\{6D794CB4-C7CD-4C6F-BFDC-9B77AFBDC02C}\InprocServer32#ThreadingModel Summary : Adware.Vundo Variant.BHO Company : Unknown Description : Vundo variant adware browser helper object. File name may vary randomly. Threat Level (1-10) : 7 Processes : * CLSID List : {2E30A228-C058-4DFF-8A9D-52F2BB49AC8C} Share this post Link to post Share on other sites
evemeyer Posted February 6, 2009 I am not sure if this will work with your problem...but the gal I was helping had hers in quarintine and until she was sure it was good to go after a reboot and rescan she removed them/deleted from SAS program and all was great on her vundos and AV360 trojan RESPONSE: I HAVE TRIED THIS SEVERAL TIMES AND IT DOESN'T WORK Share this post Link to post Share on other sites
evemeyer Posted February 6, 2009 Did you try the Repair Option? WHERE CAN I FIND THIS? I DON'T SEEM TO SEE IT IN MY PROGRAM? Share this post Link to post Share on other sites
robinb9 Posted February 6, 2009 click on the "preferences" tab you will see a tab for "repair" you can also see see it in Start menu- programs Click on the superantispyware icon and in the submenu you will see superantispyware repair Also try doing a full scan in safe mode Before you do this uncheck "System Restore" so it flushes the prior restore points (just in case Windows is holding the trojan in there). Then run superantispyware with a full scan. Once this is done- go out of safemode and go into regular mode. Run another full scan. If you are clean- go back into system restore and recheck the box so restore points start again robin Share this post Link to post Share on other sites
evemeyer Posted February 6, 2009 I will give it a try. Thank you.... My computer is running so slow. Share this post Link to post Share on other sites
SUPERAntiSpy Posted February 8, 2009 What numeric version of SUPERAntiSpyware are you running? Post your complete scan log here. Share this post Link to post Share on other sites
evemeyer Posted February 8, 2009 Thank you. I keep getting this virus..... SUPERAntiSpyware Scan Log https://www.superantispyware.com Generated 02/08/2009 at 03:58 AM Application Version : 4.23.1006 Core Rules Database Version : 3744 Trace Rules Database Version: 1714 Scan type : Complete Scan Total Scan Time : 02:27:40 Memory items scanned : 341 Memory threats detected : 0 Registry items scanned : 6892 Registry threats detected : 5 File items scanned : 27352 File threats detected : 2 Adware.Vundo Variant HKLM\Software\Classes\CLSID\{EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} HKCR\CLSID\{EC43E3FD-5C60-46A6-97D7-E0B85DBDD6C4} HKCR\CLSID\{EC43E3FD-5C60-46A6-97D7-E0B85DBDD6C4}\InprocServer32 HKCR\CLSID\{EC43E3FD-5C60-46A6-97D7-E0B85DBDD6C4}\InprocServer32#ThreadingModel C:\WINDOWS\SYSTEM32\NOGILINI.DLL HKCR\CLSID\{EC43E3FD-5C60-46A6-97D7-E0B85DBDD6C4} Share this post Link to post Share on other sites
Lasse88 Posted February 8, 2009 You should update it. Current program version: 4.25.1012 Core: 3746 Trace: 1714 Share this post Link to post Share on other sites
evemeyer Posted February 9, 2009 Okay, I took your advice and did the upgrade. Can you suggest anything else? SUPERAntiSpyware Scan Log https://www.superantispyware.com Generated 02/08/2009 at 06:09 PM Application Version : 4.25.1012 Core Rules Database Version : 3746 Trace Rules Database Version: 1714 Scan type : Complete Scan Total Scan Time : 01:20:03 Memory items scanned : 502 Memory threats detected : 0 Registry items scanned : 6898 Registry threats detected : 5 File items scanned : 27723 File threats detected : 2 Adware.Vundo Variant HKLM\Software\Classes\CLSID\{EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} HKCR\CLSID\{EC43E3FD-5C60-46A6-97D7-E0B85DBDD6C4} HKCR\CLSID\{EC43E3FD-5C60-46A6-97D7-E0B85DBDD6C4}\InprocServer32 HKCR\CLSID\{EC43E3FD-5C60-46A6-97D7-E0B85DBDD6C4}\InprocServer32#ThreadingModel C:\WINDOWS\SYSTEM32\NOGILINI.DLL HKCR\CLSID\{EC43E3FD-5C60-46A6-97D7-E0B85DBDD6C4} Share this post Link to post Share on other sites
Devjit Posted February 9, 2009 Well,its just a tiny problem.All you have to do is turn Off System Restore temporarily.Then scan your PC with SuperAntispyware and after successfully deleting the virus,restart and again turn On System Restore. Share this post Link to post Share on other sites
evemeyer Posted February 9, 2009 I did that several time. It doesn't remove it. Share this post Link to post Share on other sites
robinb9 Posted February 9, 2009 did you do what I posted about going into safe mode and doing it with system restore turned off? robin Share this post Link to post Share on other sites
