VX2 Virus - How do I remove??

Sloganjerry

Hi

I've read the malware/spyware removal posts and followed all the advice. I ran all downloads as recommended to remove/fix problems. Ewido found 199 infected objects and removed them. Spybot found nothing nor adaware in safe mode. However when I booted back to normal and ran adaware again it found the VX2 in three locations:

HKEY_CLASSES_ROOT:clsid\!!4508e20c-acad-11d2-9fc0-00550076e06f}implemented categories\!!40fc6ed5-2438-11cf-a3db-080036f12502}\

HKEY_USERS:5-1-5-21-343818398-839522115-1060284298-1003\software\microsoft\
windows\currentversion\explorer\browserhelperobjects\!!40fc6ed5-2438-11cf-a3db-080036f12502}\

HKEY_LOCAL_MACHINE:software\microsoft\
windows\currentversion\explorer\browserhelperobjects\!!40fc6ed5-2438-11cf-a3db-080036f12502}\

Anyone got any ideas how I get rid of this? Adaware finds it and I press fix but I think its rewriting itself and appearing somewhere else?? I haven't attempted to fix it this time so it should still be in these locations,

Cheers for any help?

Sloganjerry

Stompa

Googling finds this:

http://www.spywareguide.com/product_show.php?id=25

which may help.

Stompa

Stompa

On second thoughts, if you're using Ad-Aware this:

http://www.lavasoft.de/software/addons/vx2cleaner.shtml

may be a better bet.

Stompa

Browntoa

yes, use the VX2 tool, you need to download the add on tool as well as ad-aware,

Start Adware,click on the "Add Ons" button on the left, highlight the tool them click on the "run Tool" button on the bottom right.

don't forget to run it in Safe Mode

Sloganjerry

Hi Browntoa

Took your advice, thanks, ran the tool and it reported 'clean system'. Ran adaware smart scan and there they are 3 VX2 objects still there???????

What am I doing wrong?

Cheers

Sloganjerry

Browntoa

not sure, Pchelpman is the expert on these but we need a hijack this log to look at

http://www.spywareinfo.com/~merijn/downloads.html

how to use here

http://www.tomcoyote.org/hjt/

paste the log here (it tells you how to copy it in the above link)

Stompa

It does say:

NOTE: If you have earlier attempted to run Ad-Aware to remove VX2, you may need to run the VX2 Cleaner several times to remove possible VX2 remains.

Stompa