Hey, thanks for the information, The Superantispyware found more than what I had previously found on my scans. After doing theabove in safe mode and running Malware Anti Malware after reboot I have found the same 2 infections like the previous scan. My Pcdoctor also shows in its scan the Elevated threat of Trojan Virtumonde.
This is the log from SuperAntispyware -
SUPERAntiSpyware Scan Log
http://www.superantispyware.comGenerated 01/20/2009 at 09:31 AM
Application Version : 4.25.1012
Core Rules Database Version : 3717
Trace Rules Database Version: 1691
Scan type : Complete Scan
Total Scan Time : 01:30:14
Memory items scanned : 312
Memory threats detected : 4
Registry items scanned : 7085
Registry threats detected : 30
File items scanned : 24190
File threats detected : 4
Adware.Vundo Variant
C:\WINDOWS\SYSTEM32\PUNZCV.DLL
C:\WINDOWS\SYSTEM32\PUNZCV.DLL
C:\WINDOWS\SYSTEM32\RCZBQP.DLL
C:\WINDOWS\SYSTEM32\RCZBQP.DLL
C:\WINDOWS\SYSTEM32\DJUFTT.DLL
C:\WINDOWS\SYSTEM32\DJUFTT.DLL
C:\WINDOWS\SYSTEM32\BCOJAQ.DLL
C:\WINDOWS\SYSTEM32\BCOJAQ.DLL
HKLM\Software\Classes\CLSID\{20a0af78-0d35-4f86-89fd-9bdeb97ec237}
HKCR\CLSID\{20A0AF78-0D35-4F86-89FD-9BDEB97EC237}
HKCR\CLSID\{20A0AF78-0D35-4F86-89FD-9BDEB97EC237}\InprocServer32
HKCR\CLSID\{20A0AF78-0D35-4F86-89FD-9BDEB97EC237}\InprocServer32#ThreadingModel
HKLM\Software\Classes\CLSID\{464770b7-acad-42a3-aa13-26a1b583115b}
HKCR\CLSID\{464770B7-ACAD-42A3-AA13-26A1B583115B}
HKCR\CLSID\{464770B7-ACAD-42A3-AA13-26A1B583115B}\InprocServer32
HKCR\CLSID\{464770B7-ACAD-42A3-AA13-26A1B583115B}\InprocServer32#ThreadingModel
HKLM\Software\Classes\CLSID\{694aa130-0862-4655-82e6-8c66e0a42d96}
HKCR\CLSID\{694AA130-0862-4655-82E6-8C66E0A42D96}
HKCR\CLSID\{694AA130-0862-4655-82E6-8C66E0A42D96}\InprocServer32
HKCR\CLSID\{694AA130-0862-4655-82E6-8C66E0A42D96}\InprocServer32#ThreadingModel
HKLM\Software\Classes\CLSID\{eeadc601-ec05-4578-b70c-b38f6c106d9a}
HKCR\CLSID\{EEADC601-EC05-4578-B70C-B38F6C106D9A}
HKCR\CLSID\{EEADC601-EC05-4578-B70C-B38F6C106D9A}\InprocServer32
HKCR\CLSID\{EEADC601-EC05-4578-B70C-B38F6C106D9A}\InprocServer32#ThreadingModel
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A63E645F-13BD-45ED-B15F-6E8C1BD57279}
HKU\S-1-5-21-2702860542-362460839-2924089733-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{20A0AF78-0D35-4F86-89FD-9BDEB97EC237}
HKU\S-1-5-21-2702860542-362460839-2924089733-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEADC601-EC05-4578-B70C-B38F6C106D9A}
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A63E645F-13BD-45ED-B15F-6E8C1BD57279}
Trojan.Unclassified/PotPWS
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99C6D1BB-7555-474C-91DA-D8FB62A9CC75}
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99C6D1BB-7555-474C-91DA-D8FB62A9CC75}
Adware.SpeedRunner
HKU\S-1-5-21-2702860542-362460839-2924089733-1005\Software\Microsoft\Windows\CurrentVersion\Run#SfKg6wIP [ C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Windows\nelrud.exe ]
Rogue.Component/Trace
HKLM\Software\Microsoft\286A0556
HKLM\Software\Microsoft\286A0556#286a0556
HKLM\Software\Microsoft\286A0556#Version
HKLM\Software\Microsoft\286A0556#286aa8d6
HKLM\Software\Microsoft\286A0556#286ac133
HKU\S-1-5-21-2702860542-362460839-2924089733-1005\Software\Microsoft\FIAS4018
Adware.Prun
HKU\S-1-5-21-2702860542-362460839-2924089733-1005\Software\Microsoft\Windows\CurrentVersion\Run#prunnet [ "C:\WINDOWS\system32\prunnet.exe" ]
Log from Mawarebytes AntimalwareMalwarebytes' Anti-Malware 1.33
Database version: 1665
Windows 5.1.2600 Service Pack 3
1/20/2009 8:02:55 PM
mbam-log-2009-01-20 (20-02-55).txt
Scan type: Quick Scan
Objects scanned: 59826
Time elapsed: 19 minute(s), 23 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 2
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\diyyfayadgaah (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\prunnet (Trojan.Agent) -> Quarantined and deleted successfully.
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)