I normally wouldn't bother signing up on forums, but I felt I just had to say a big thank-you.
I was having this exact problem. Initially I didn't know it was the VUNDO trojan. I was getting all these @$#!! popup ads opening up out of the blue, and spent hours over the weekend scanning with macafee, lavasoft ad-aware, trendmicro, all to no avail. Ad-aware found infected registry entries containing "6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C" and it supposedly removed them, but then they simply came back. I searched the registry and tried manually deleting them, but they always re-spawned, and the popups didn't stop.
I tried a system restore in XP but my computer didn't have a restore point going back far enough in time to before I got the problem. I was almost resigned to having to do a full system recovery and losing everything when I found this thread.
So I said what the heck I would try this one last thing. I downloaded and ran the malwarebytes anti-malware. Did the quick scan as per your post. It ran for around 11 minutes and found 40+ infected items!! All the other software I tried ran for hours and didn't resolve the issue or find as many infected items.
Part of the log is shown below:
Malwarebytes' Anti-Malware 1.31
Database version: 1472
Windows 5.1.2600 Service Pack 3
12/7/2008 6:09:37 PM
Scan type: Quick Scan
Objects scanned: 60391
Time elapsed: 11 minute(s), 53 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 4
Registry Keys Infected: 20
Registry Values Infected: 4
Registry Data Items Infected: 2
Folders Infected: 2
Files Infected: 21
After it did the removal of infected items, there was a message that 4 items containing the "6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C" couldn't be removed. But then I rebooted, and rescanned and it came up clean. I searched the registry again. Found one entry containing "6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C" in the cached section and I deleted that manually. Searched the registry again, and it didn't appear to respawn.
The popups have stopped, and I'm super-happy !!
I'm going to do a FULL scan just to make absolutely sure, but it is looking good.
Many thanks again!!!
Edited by Dirty_Diana, 07 December 2008 - 10:12 PM.