Windows Vista Recovery

[NecroFiendOG]

While in safe mode I've downloaded & run several versions of the 'Rkill' program to terminate instances of the virus currently running before performing a full scan with MBAM.exe, although they terminate the instances of the virus they immediately pop back up before I can run the scan. I've updated & run the full scan numerous times (in safe & normal modes), but the virus is still there when I restart. What else can I do?

Here are the logs:

Malwarebytes' Anti-Malware 1.50.1.1100

www.malwarebytes.org

Database version: 6666

Windows 6.0.6000 (Safe Mode)

Internet Explorer 7.0.6000.17037

5/24/2011 4:42:14 PM

mbam-log-2011-05-24 (16-42-14).txt

Scan type: Quick scan

Objects scanned: 148325

Time elapsed: 2 minute(s), 26 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 3

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

c:\Users\phoenix\AppData\Local\Temp\adobe_flash_player.exe (Trojan.Agent) -> Quarantined and deleted successfully.

c:\Users\phoenix\AppData\Local\Temp\0.9188835689116667.exe (Trojan.Dropper) -> Quarantined and deleted successfully.

c:\programdata\34660112.exe (Trojan.Agent) -> Quarantined and deleted successfully.

mbam-log-2011-05-24 (19-09-46).txt

Scan type: Full scan (C:\|D:\|E:\|)

Objects scanned: 320062

Time elapsed: 2 hour(s), 0 minute(s), 14 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

c:\programdata\33742608.exe (Trojan.Agent) -> Quarantined and deleted successfully.

Malwarebytes' Anti-Malware 1.50.1.1100

www.malwarebytes.org

Database version: 6668

Windows 6.0.6000 (Safe Mode)

Internet Explorer 7.0.6000.17037

5/24/2011 8:09:00 PM

mbam-log-2011-05-24 (20-09-00).txt

Scan type: Full scan (C:\|D:\|E:\|)

Objects scanned: 323349

Time elapsed: 41 minute(s), 17 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

c:\programdata\34529040.exe (Trojan.Agent) -> Quarantined and deleted successfully.

Malwarebytes' Anti-Malware 1.50.1.1100

www.malwarebytes.org

Database version: 6674

Windows 6.0.6000 (Safe Mode)

Internet Explorer 7.0.6000.17037

5/25/2011 12:11:30 PM

mbam-log-2011-05-25 (12-11-30).txt

Scan type: Full scan (C:\|D:\|E:\|)

Objects scanned: 323216

Time elapsed: 38 minute(s), 29 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 1

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 2

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\NpLvkgdMCjJX (Trojan.FakeAlert) -> Value: NpLvkgdMCjJX -> Quarantined and deleted successfully.

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

c:\programdata\nplvkgdmcjjx.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

c:\Users\phoenix\AppData\LocalLow\Sun\Java\deployment\cache\6.0\12\a51fecc-5ace1521 (Trojan.FakeAlert) -> Quarantined and deleted successfully.

[screen317]

Hi and welcome to Malwarebytes.

Please update MBAM, run a Quick Scan, and post its log.

Next, download DDS by sUBs and save it to your Desktop.

Double-click on the DDS icon and let the scan run. When it has run two logs will be produced, please post only DDS.txt directly into your reply.

[screen317]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!