Vundo Variants A,B, C

Hi. I have Vundo Variants A,B,C which windows live one care detects but is unable to remove. It claims to remove it, but when I reboot. The scanner picks up different variants of Vundo. I have followed all the procedures of ther READ & RUN ME FIRST. Malaware removal guide. Attached will be logs from the various program scans. Prior to the guide I have run VundoBeGone in safe mode which did not detect Vundo, I assume this false negative result is due to removal of certain registry entries after my analysis of my HiJackThis Log. Vundo mess with dll of Winlogon proxy. I kind of this out. I have now downloaded the windosws malicious software removal tool and want to run.

I want to now after analysis of the logs various program mentioned in the Malaware Removal guide , am I finally rid of this trojan?

Your Help will be greatly appreciated
Kind Regards

P.S Many thanks to the Major Geeks team, for your guide.

 

Thank you for your great help Chasalang, greatly appreciated.

I could not locate the location of the Malwarebytes Log, so I copied it from the program, under the log section

Malwarebytes' Anti-Malware 1.15
Database version: 834

10:55:52 AM 2008/06/07
mbam-log-6-7-2008 (10-55-52).txt

Scan type: Quick Scan


Objects scanned: 36743
Time elapsed: 7 minute(s), 20 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)


(No malicious items detected)

Files Infected:

(No malicious items detected)


I dont know where the superantispyware log stored itself. I tried searching for it but could not find it. I do however remember that scan removed some files.
Folders Infected:

 

Thanks here is the SAS log.


SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 06/06/2008 at 02:12 AM

Application Version : 4.15.1000

Core Rules Database Version : 3475
Trace Rules Database Version: 1466

Scan type : Complete Scan
Total Scan Time : 01:02:32

Memory items scanned : 655
Memory threats detected : 0
Registry items scanned : 8699
Registry threats detected : 7
File items scanned : 35084
File threats detected : 5

Trojan.Media-Codec
C:\Users\Drushen\Favorites\Online Security Test.url

Malware.SpyLocked
HKCR\videoaccessactivex.Chl
HKCR\videoaccessactivex.Chl\CLSID

Trojan.Media-Codec/V4
C:\Program Files\Video Add-on\ot.ico
C:\Program Files\Video Add-on\ts.ico
C:\Program Files\Video Add-on\uninst.exe
C:\Program Files\Video Add-on
HKU\S-1-5-21-332601266-467600200-1553415820-1000\Software\Online Add-on
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE Safety Features
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE Safety Features#DisplayName
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE Safety Features#UninstallString

Adware.Vundo Variant/Rel
HKU\S-1-5-21-332601266-467600200-1553415820-1000\Software\Microsoft\rdfa