Mark246

OK, Firefox, I proceeded to your Step 2... I made a backup of the Registry. (I think you should include that in future advice posts.) I ran your FixMe.bat file. The DOS window displayed an error message, something like: Error: unable to find the specified registry key. Restarted the laptop. Internet Explorer... WORKS ! ! ! WIRELESS ! ! ! Very Cool ! What did we do?... OK,... we "Disabled Internet Explorer Proxy Settings and Reset TCP/IP" I know what Proxies are, but I'm not familiar with TCP/IP. What th' heck did you do? Whatever it was,... Thank You... Thank You... Thank You ! I started reading about TCP/IP on Wikipedia... it soon got above my level of understanding. I started MBAM, Updated it, and ran a Full scan: drive C and D. It took 1 1/2 hours. Found nothing bad. I started Comodo Antivirus, Updated it, and ran a scan: My Computer. It took 1 1/2 hours. Found nothing bad. All is well. There is peace on earth. (OK... not really.) You can now return to your regularly scheduled programming. Thanks very much for ALL of your help(s), people. Mark246

Hello, again, TroubleShooters. Haider: An update... The ISP here is AT&T... a DSL connection. So, does that tell you if the wireless connection is Static IP or DHCP? I've started to read the "Comodo Firewall and MBAM" thing. Haven't finished. Noknojon: I'm thinking that... because other laptops do work, then the problem canNot be in the Modem or Router. Is that correct? Firefox: You prefaced your post with "As Long As This Is Not Due To An Infection...." I'm thinking that this IS due to an infection. Am I wrong? Your "Step 1" concludes with "Run MalwareBytes"... Recall that my post #7 says I Did get MalwareBytes to run successfully (via a Wired connection). And my post #11 says I got Comodo to run successfully. (I understand that this is a MBAM forum. Still, Comodo was highly recommended in some antivirus forum.) Regardless, (I do prefer Firefox, but) I started IE. Of course, it wouldn't connect. In Tools > Internet Options > Connections > LAN Settings, "Automatically detect settings" is already checked. I "OK'd" out of the windows. IE still doesn't connect. The IE "Diagnose Connection Problems" thing did the same as in my post #1. I could hook up Wired again, and run MBAM again, but I think that would be a waste. Your "Step 2" also concludes with "Run MalwareBytes"... Knowing that I DID eventually get MBAM to run, I'm guessing that I should Not now do your "Step 2" Registry change. Is that correct? And... should I continue with your "Step 3" routine? Thanks very much for your continued help, people.

Thanks very much for your continuing help, Haider. An update... I had been trying it in Safe mode. Maybe that's why Comodo wouldn't run? I apologize for not mentioning that before. Anyway, because I Can connect (wired), I restarted Windows normal. The Comodo virus definition update worked. I scanned "My computer". The scan found 19 problems, mostly High. I Quaranteed them all. Unhooked the (wired connection) ethernet cable. Restarted the laptop normal. Wireless Network Connection again says Connected, Signal strength Very good. Still cannot connect to the internet Wirelessly. Haider: I don't know if the wireless connection is Static IP or DHCP. This is a normal home-based LAN (I just rent a room here). I think the ISP is Cox. Does that answer your question? Any more ideas, Please? Thanks.

Thanks, Noknojon, for Your Suggestion to hook it up Wired. I apologize for not recognizing that contribution. I'm getting increasingly flustered. I don't understand your comment... No, I do dot assume that other computers have the same problem. OK... I'll eagerly await further instructions / "options". Thanks, people.

Thanks for your help, Haider. When I got to the Wireless Networks tab, "2WIRE160" was already listed there. It was connected to it. I deleted it, then Added it, like you said. Same problem... The wireless network icon in system tray says Connected, signal strength Excellent. Still cannot get to the internet. Just for the heck of it, I hooked up an ethernet cable... It Does connect to the internet with a Wired connection. So, while connected, I started MalwareBytes, Updated, then Scanned, just in case my copying the latest virus definitions via the flashdisk didn't work. It still found nothing. I deleted all evidence of Comodo on the problem laptop, to start over. While still connected via ethernet Wired connection, I downloaded Comodo, ran it, and it came up with the same error window: "Update failed: Error code 0x80004002. No such interface supported". I suspect that's caused by the malware. I'm getting angry. Any further ideas? Thanks, people. Mark246

Thanks very much for the ideas, people, but... I'm pretty durn sure that the problem is not Modem or Router. At 2 different street addresses, that laptop doesn't work, but other laptops Do work. Therefore, Modem or Router can't be the problem... Right? Maybe I'm wrong in that assumption. Haider: Where do I find the "Preferred" networks? I confirmed that some options are identical on this Working laptop and on the Problem laptop: Network Authentication type: "open" Data encryption type: WEP Network security key: yes, I know it. On this Working laptop (running Vista), I can't find a reference to: "Enable IEEE 802 1x authentication for this network". On the Problem laptop, "Enable IEEE 802.1x authentication for this network" is Not checked. Maybe it's a virus... Firefox: Thanks very much for those instructions. I was able to copy MalwareBytes with the latest virus definitions onto the problem laptop. I ran it... it found no problems. I downloaded and installed Comodo Antivirus onto a good PC. Copied the entire (large) directory to a Flashdisk. Copied it from the Flashdisk to a folder on the problem laptop. Ran Comodo > Antivirus > Run a scan > Create new scan > Add > My computer > C drive > Apply > Name: Cdrive > Apply > Selected that name > Scan > It came up with an error window: "Update failed: Error code 0x80004002. No such interface supported". Noknojon: What do you mean? Are you referring to simply hooking it up Wired? Not wireless? Via an ethernet cable? Haven't tried that, actually. I'm stuck. Any more ideas, people? Thanks very much for your efforts. Mark53

Hello, MalwareBytes, First... I Love your program. It's helped me many times in the past. On a Toshiba Satellite laptop, running Win XP, Version 2002, SP3 Plenty of spare space on the hard drive. Trying to connect via wireless. It wouldn't connect at a different street address, either. Other laptops connect with no problems at both addresses. So, I'm sure the problem is not the router or modem. Firefox says: "Server not found. Firefox can't find the server at..." IE says: "Internet Explorer cannot display the webpage." So, I clicked on "Diagnose Connection Problems" > "Wireless" > Selected the correct Network (2WIRE160) > It said to "Contact your ISP or the manufacturer of the modem and/or router." Very (not) helpful. The "Wireless Network Connection" says Connected, with Excellent signal strength. I clicked the "Repair Wireless Connection" thing, and it didn't fix anything. Malwarebytes cannot connect, to update. Restarted it in Safe mode with Networking: same results. I think I'd like to run MalwaryBytes from a Flashdisk on the laptop. From this Desktop, I copied the install pgm to the flashdisk, and ran it. It was installed OK on the Flashdisk, but it won't update. I specified mbam.exe as an exception to the Win Firewall: still wouldn't work. I disabled the Win Firewall: still wouldn't work. SO... how can I run Malwarebytes from a Flashdisk? Or,... what else can I tell ya', guys? HELP, Please. TIA. Mark246

Thanks for the reply, exile, but if you read my entry, you'd see that it didn't work. Regardless,... all is well, now... I read somewhere on this forum that I should be Certain that I have a genuine version of MBAM 'cause some fakes are out there. I don't recall how I originally got MBAM, so... I downloaded MBAM directly from the malwarebytes site, and it solved all my problems. I apparently was running a fake version before. I LOVE that MBAM program ! I was getting Really upset with that Spyware Guard 2008 crap. I was seriously thinking that malwarebytes and Spyware Guard 2008 were working WITH each other. All is well, now. THANKS, people. Mark246

Thanks very much for you reply, exile360. OK,... I renamed it to wasmbam.exe, & then it Did start up. Cool. Database is from 12/3/08, version 1456, footprints 59475. I cannot update that... it asks if I have a 'net connection (I do), and if my firewall allows mbam... I stopped the Spyware Doctor that I usually have running. With win Firewall on, I can't add mbam as an exception. I turned off win firewall. Same thing... can't update,... from either mirror. Now THIS is weird... I cannot go to malwarebytes.org OR to pctools.com (where Spyware Doctor is)... thru Either Firefox or IE. I believe that Spyware Guard 2008 is disallowing that, 'cause I CAN go to any other websites. I'm communicating with you on a different un-infected laptop. This is really pissing me off. You might wonder why I don't try the Spyware Doctor to remove Spyware Guard 2008... On THIS laptop, the Doctor updates just fine. On the infected laptop, the Doctor won't update. It's using an older definitions database... probably doesn't know about Spyware Guard 2008. OK,... I tried the fix mentioned first, in entry35969... Disabled the TDSSserv.sys. Restarted. Already had the downloaded program; didn't download another copy. Renamed the wasmbam.exe to was2mbam.exe. Double-clicked it... it started... Again,... Could not update... same reason. You didn't give me any other instructions... like if these instructions did NOT work. They didn't work. The MBAM Log file has this content... Malwarebytes' Anti-Malware 1.31 Database version: 1456 Windows 5.1.2600 Service Pack 3 12/16/2008 4:50:39 PM mbam-log-2008-12-16 (16-50-39).txt Scan type: Quick Scan Objects scanned: 63847 Time elapsed: 1 hour(s), 2 minute(s), 39 second(s) Memory Processes Infected: 0 Memory Modules Infected: 3 Registry Keys Infected: 34 Registry Values Infected: 11 Registry Data Items Infected: 5 Folders Infected: 10 Files Infected: 48 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: C:\WINDOWS\system32\mlJabyVl.dll (Trojan.Vundo.H) -> Delete on reboot. C:\WINDOWS\system32\ssqPheDs.dll (Trojan.Vundo.H) -> Delete on reboot. C:\WINDOWS\system32\rsekd83jde.dll (Trojan.BHO) -> Delete on reboot. Registry Keys Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} (Trojan.Vundo.H) -> Delete on reboot. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ssqpheds (Trojan.Vundo.H) -> Delete on reboot. HKEY_CLASSES_ROOT\CLSID\{6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} (Trojan.Vundo.H) -> Delete on reboot. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ba8effdd-e866-4605-a23f-2d0110bd32c7} (Trojan.Vundo.H) -> Delete on reboot. HKEY_CLASSES_ROOT\CLSID\{ba8effdd-e866-4605-a23f-2d0110bd32c7} (Trojan.Vundo.H) -> Delete on reboot. HKEY_CLASSES_ROOT\CLSID\{d5bf49a2-94f1-42bd-f434-3604812c807d} (Trojan.Zlob.H) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\bho_myjavacore.mjcore (Trojan.BHO) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\bho_myjavacore.mjcore.1 (Trojan.BHO) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{17e44256-51e0-4d46-a0c8-44e80ab4ba5b} (Trojan.BHO) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{d5bf49a2-94f1-42bd-f434-3604812c807d} (Trojan.BHO) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d5bf49a2-94f1-42bd-f434-3604812c807d} (Trojan.BHO) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\{5222008a-dd62-49c7-a735-7bd18ecc7350} (Rogue.VirusRemover) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\{5222008a-dd62-49c7-a735-7bd18ecc7350} (Rogue.VirusRemover) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{e0f01490-dcf3-4357-95aa-169a8c2b2190} (Trojan.BHO) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\AppID\{80ef304a-b1c4-425c-8535-95ab6f1eefb8} (Trojan.BHO) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\spyware guard 2008 (Rogue.SpywareGuard) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\icheck (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\AppID\BHO_MyJavaCore.DLL (Trojan.BHO) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\virusremover2008 (Rogue.VirusRemove) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\virusremover2008 (Rogue.VirusRemove) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\GetModule (Adware.Agent) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\GetPack (Adware.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\tdssdata (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\tdss (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\xpre (Trojan.Downloader) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\instkey (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\spyware guard (Rogue.SpywareGuard) -> Quarantined and deleted successfully. Registry Values Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{d5bf49a2-94f1-42bd-f434-3604812c807d} (Trojan.Zlob.H) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} (Trojan.Vundo.H) -> Delete on reboot. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\spywareguard (Rogue.SpywareGuard) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\getpack26 (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\getmodule32 (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\gadcom (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\prunnet (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\prunnet (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\xsgds4fgffght (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\xsgds4fgffght (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Jnskdfmf9eldfd (Trojan.Downloader) -> Quarantined and deleted successfully. Registry Data Items Infected: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\mljabyvl -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Authentication Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\mljabyvl -> Delete on reboot. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.Agent) -> Data: c:\windows\system32\ -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.Agent) -> Data: system32\ -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions (Hijack.FolderOptions) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. Folders Infected: C:\Program Files\Spyware Guard 2008 (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Program Files\Spyware Guard 2008\quarantine (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Program Files\GetPack (Trojan.Agent) -> Quarantined and deleted successfully. C:\Program Files\iCheck (Trojan.Agent) -> Quarantined and deleted successfully. C:\Program Files\GetModule (Trojan.Agent) -> Quarantined and deleted successfully. C:\Program Files\Microsoft Common (Trojan.Agent) -> Quarantined and deleted successfully. C:\Program Files\Mjcore (Trojan.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Nicole if lucky\Start Menu\Programs\Spyware Guard 2008 (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Documents and Settings\Nicole if lucky\Application Data\gadcom (Trojan.Agent) -> Quarantined and deleted successfully. C:\Documents and Settings\Nicole if lucky\Application Data\GetModule (Trojan.Agent) -> Quarantined and deleted successfully. Files Infected: C:\WINDOWS\system32\ssqPheDs.dll (Trojan.Vundo.H) -> Delete on reboot. C:\WINDOWS\system32\mlJabyVl.dll (Trojan.Vundo.H) -> Delete on reboot. C:\WINDOWS\system32\lVybaJlm.ini (Trojan.Vundo.H) -> Delete on reboot. C:\WINDOWS\system32\lVybaJlm.ini2 (Trojan.Vundo.H) -> Delete on reboot. C:\WINDOWS\system32\mnghblgn.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully. C:\WINDOWS\system32\nglbhgnm.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully. C:\WINDOWS\system32\rsekd83jde.dll (Trojan.Zlob.H) -> Delete on reboot. C:\Program Files\Mjcore\Mjcore.dll (Trojan.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Nicole if lucky\Local Settings\Temporary Internet Files\Content.IE5\BNJOZLGX\zc113432[1] (Trojan.Vundo.H) -> Quarantined and deleted successfully. C:\Program Files\Spyware Guard 2008\conf.cfg (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Program Files\Spyware Guard 2008\mbase.vdb (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Program Files\Spyware Guard 2008\quarantine.vdb (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Program Files\Spyware Guard 2008\queue.vdb (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Program Files\Spyware Guard 2008\spywareguard.exe (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Program Files\Spyware Guard 2008\uninstall.exe (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Program Files\Spyware Guard 2008\vbase.vdb (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Program Files\GetPack\dictame.gz (Trojan.Agent) -> Quarantined and deleted successfully. C:\Program Files\GetPack\GetPack26.exe (Trojan.Agent) -> Quarantined and deleted successfully. C:\Program Files\GetPack\trgtame.gz (Trojan.Agent) -> Quarantined and deleted successfully. C:\Program Files\iCheck\Uninstall.exe (Trojan.Agent) -> Quarantined and deleted successfully. C:\Program Files\GetModule\GetModule32.exe (Trojan.Agent) -> Quarantined and deleted successfully. C:\Program Files\Microsoft Common\svchost.exe (Trojan.Agent) -> Quarantined and deleted successfully. C:\Documents and Settings\Nicole if lucky\Start Menu\Programs\Spyware Guard 2008\Spyware Guard 2008.lnk (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Documents and Settings\Nicole if lucky\Start Menu\Programs\Spyware Guard 2008\Uninstall.lnk (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Documents and Settings\Nicole if lucky\Application Data\gadcom\gadcom.exe (Trojan.Agent) -> Quarantined and deleted successfully. C:\Documents and Settings\Nicole if lucky\Application Data\GetModule\dicik.gz (Trojan.Agent) -> Quarantined and deleted successfully. C:\Documents and Settings\Nicole if lucky\Application Data\GetModule\kwdik.gz (Trojan.Agent) -> Quarantined and deleted successfully. C:\Documents and Settings\Nicole if lucky\Application Data\GetModule\ofadik.gz (Trojan.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\mcrh.tmp (Malware.Trace) -> Quarantined and deleted successfully. C:\WINDOWS\system32\prunnet.exe (Trojan.Agent) -> Quarantined and deleted successfully. C:\Documents and Settings\Nicole if lucky\Local Settings\Temp\winloggn.exe (Trojan.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\wpv321229210935.cpx (Trojan.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\ (Trojan.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\~.exe (Trojan.Downloader) -> Quarantined and deleted successfully. C:\Documents and Settings\Nicole if lucky\Local Settings\Temp\csrssc.exe (Trojan.Downloader) -> Quarantined and deleted successfully. C:\WINDOWS\system32\byXNdcDV.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\WINDOWS\system32\wvUonnmm.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\WINDOWS\system32\vtUlJbbX.dll (Trojan.vundo) -> Quarantined and deleted successfully. C:\WINDOWS\sysexplorer.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\WINDOWS\reged.exe (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\WINDOWS\spoolsystem.exe (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\WINDOWS\sys.com (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\WINDOWS\syscert.exe (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\WINDOWS\vmreg.dll (Rogue.SpywareGuard) -> Quarantined and deleted successfully. C:\Documents and Settings\Nicole if lucky\Local Settings\Temp\winvsnet.tmp (Rogue.Installer) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Microsoft\Protect\svhost.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\Microsoft\Protect\track.sys (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\Documents and Settings\Nicole if lucky\Desktop\Spyware Guard 2008.lnk (Rogue.SpywareGuard) -> Quarantined and deleted successfully. HELP, Please. Thanks. Mark246

That (darned) "Spyware Guard 2008" is Really persistent. I cannot get rid of it. I was able to download & run MBAM as instructed. It ran for over an hour, found about 120 problems, and couldn't remove 3 or 4 for some reason. I don't recall what they were. Now, I can't even start MBAM. I double-click it, the hourglass appears for a few seconds, as if it's doing something, but nothing happens. I'm sure that I have the latest version. Looking at this forum,... I'll need to upload the Log? Where can I find that Log, other than thru the MBAM program? Thanks, people. Mark246