Vista Registry Problem

Using Vista Ultimate SP1 64 bit. A few months ago was infected by a
persistent virus which mostly appears as "YURD" often YURD622. I was able
to eliminate the symptoms completely - popups, potential hijacks etc.
However the 'Malwarebytes' and manual registry scans finds in
HKEY_CURRENT_USER\Microsoft\Windows\CurrentVersion \Run\YURD622.exe. This
can be deleted but reappears on the next even immediate scan. If you do it
in safe mode it appears on the next scan after reboot.

Anyone have any ideas as to what can be continually undeleting this entry?
TIA

Bigbear

-----------------
www.Newsgroup-Binaries.com - *Completion*Retention*Speed*
Access your favorite newsgroups from home or on the road
-----------------

Bigbear wrote:
> Using Vista Ultimate SP1 64 bit. A few months ago was infected by a
> persistent virus which mostly appears as "YURD" often YURD622. I was
> able to eliminate the symptoms completely - popups, potential hijacks
> etc. However the 'Malwarebytes' and manual registry scans finds in
> HKEY_CURRENT_USER\Microsoft\Windows\CurrentVersion \Run\YURD622.exe. This
> can be deleted but reappears on the next even immediate scan. If you do it
> in safe mode it appears on the next scan after reboot.
>
> Anyone have any ideas as to what can be continually undeleting this
> entry? TIA

Google lists fixes for removing YURD

relic wrote:
> Bigbear wrote:
>> Using Vista Ultimate SP1 64 bit. A few months ago was infected by a
>> persistent virus which mostly appears as "YURD" often YURD622. I was
>> able to eliminate the symptoms completely - popups, potential hijacks
>> etc. However the 'Malwarebytes' and manual registry scans finds in
>> HKEY_CURRENT_USER\Microsoft\Windows\CurrentVersion \Run\YURD622.exe. This
>> can be deleted but reappears on the next even immediate scan. If you do it
>> in safe mode it appears on the next scan after reboot.
>>
>> Anyone have any ideas as to what can be continually undeleting this
>> entry? TIA
>
> Google lists fixes for removing YURD
>
>
Not sure if vista has this.. but xp has a nasty little folder called
Content ie5. it is hidden, you need to navigate to it and know where it
is to open it, you cant find it by a search. Check that folder for
virus bits. Also open the prefetch folder, delete the contents. They
will come back on next boot. (again, xp but should be similar in vista)
also you can download a removal tool that will find anything you missed.

In article <4941d3e9$0$5461$>,
gbalkam <> wrote:

> relic wrote:
> > Bigbear wrote:
> >> Using Vista Ultimate SP1 64 bit. A few months ago was infected by a
> >> persistent virus which mostly appears as "YURD" often YURD622. I was
> >> able to eliminate the symptoms completely - popups, potential hijacks
> >> etc. However the 'Malwarebytes' and manual registry scans finds in
> >> HKEY_CURRENT_USER\Microsoft\Windows\CurrentVersion \Run\YURD622.exe. This
> >> can be deleted but reappears on the next even immediate scan. If you do it
> >> in safe mode it appears on the next scan after reboot.
> >>
> >> Anyone have any ideas as to what can be continually undeleting this
> >> entry? TIA
> >
> > Google lists fixes for removing YURD
> >
> >
> Not sure if vista has this.. but xp has a nasty little folder called
> Content ie5. it is hidden, you need to navigate to it and know where it
> is to open it, you cant find it by a search. Check that folder for
> virus bits. Also open the prefetch folder, delete the contents. They
> will come back on next boot. (again, xp but should be similar in vista)
> also you can download a removal tool that will find anything you missed.

Just initialize the dam HD and say "BE Gone" 1,000 times.