Hello,

I've been a long time reader and this forum has helped me many times. However, this is the first time I have not been able to remove a virus/malware. So I am posting for some help.

The malware will not allow Malewarebytes to update, nor will it allow superanispyware to update. I am getting false alerts as follows: "Warning: the media system on your computer is corrupt", "system alert: virus.win32.pgcode.ak - click balloon to install antivirus..." etc

Both Malewarebytes and superantispware find issues but upon rebot, the maleware returns.

mbam - Log

Malwarebytes' Anti-Malware 1.38
Database version: 2353
Windows 5.1.2600 Service Pack 3

7/1/2009 11:14:13 AM
mbam-log-2009-07-01 (11-14-13).txt

Scan type: Quick Scan
Objects scanned: 106358
Time elapsed: 3 minute(s), 1 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 2
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 4

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
\\?\globalroot\systemroot\system32\UACmgokkshxtlivjshys.dll (Trojan.TDSS) -> Delete on reboot.
\\?\globalroot\systemroot\system32\UACjjqfrjtiqoqxlxjcb.dll (Trojan.TDSS) -> Delete on reboot.

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\UAC (Rootkit.Trace) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (Hijack.TaskManager) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
\\?\globalroot\systemroot\system32\UACmgokkshxtlivjshys.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
\\?\globalroot\systemroot\system32\UACjjqfrjtiqoqxlxjcb.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
c:\documents and settings\Super\local settings\temporary internet files\Content.IE5\05CKESMV\load[1].exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\uacinit.dll (Trojan.Agent) -> Delete on reboot.


SuperAntiSpyware Log

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 07/01/2009 at 11:39 AM

Application Version : 4.26.1006

Core Rules Database Version : 3961
Trace Rules Database Version: 1902

Scan type : Quick Scan
Total Scan Time : 00:17:39

Memory items scanned : 451
Memory threats detected : 2
Registry items scanned : 539
Registry threats detected : 0
File items scanned : 28476
File threats detected : 2

Rootkit.Agent/Gen-UACFake
\?\GLOBALROOT\C:\WINDOWS\SYSTEM32\UACJJQFRJTIQOQXLXJCB.DLL
\?\GLOBALROOT\C:\WINDOWS\SYSTEM32\UACJJQFRJTIQOQXLXJCB.DLL
\?\GLOBALROOT\C:\WINDOWS\SYSTEM32\UACMGOKKSHXTLIVJSHYS.DLL
\?\GLOBALROOT\C:\WINDOWS\SYSTEM32\UACMGOKKSHXTLIVJSHYS.DLL

Thank you for your time and help,

Sailerman