As I stated before, I've used a number of programs to diagnosis this issue and I'll list what I remember below:
- Malwarebytes' Anti-Malware - Fixed numerous spyware/adware issues and usually left one file, "winupdate.exe" for deletion upon restart or something to that effect.
- SpyHunter - Removed Trojan.Vundo and then did not detect any other viruses even though they were obtrusively visible as my desktop was locked etc.
- CleanUp! - I read this program might help in this forum I believe. I'm not sure if it did but it cleared up 1 gig of space on my computer
- Spyware Doctor - This program worked just as well as Malwarebytes and the one persisting file that it did not delete was "winupdate.exe."
- DelDomains.inf - After this problem persisted for a day, I tried to access certain websites and was surprised to find it say "Restricted Site" , "Your system is infected. Please activate your antivirus software." I tried to use this inf file to fix it but it did not work.
- Spyware Blaster - I believe this program was more for prevention than actual virus removal. It did not have any direct affect.
- SmitfraudFix - Fixed the problem with the "Restricted Site". I performed all the operations I found.
- Silent Runners.vbs - I actually have no idea what this does/did.
- AboutBuster - Read about it in some forum. It scanned my computer for viruses and found absolutely nothing
The logs attached have been taken AFTER these scans/fixes have been applied where my desktop, taskbar, and internet are all intact -> thus, the semblance of a fixed computer. To my remembrance, I have restarted this computer several times and have seen that the virus reappars HOWEVER the last time I restarted the computer, I do not think that any issues arose but I still would like you to double check the logs.
EDIT: At 5:04 on July 7th 2009, I re-performed the Spyware Doctor scan and it came up with one result, "winupdate.exe" so the problem still does exist.
(I am not sure if it removed the file and if it did whether it will come up again at restart because it stated Infections Found: 1, Infections Removed: 1, Infections Ignored: 1. <- not exactly sure what that means..)
Edited by aljohri, 08 July 2009 - 04:07 PM.