Flash update problem

I also want to add that I thought maybe the User Account Control might be the problem and so I turned it off.  (not recommded I know, but was trying for trial and error)  I can now go to a website with flash content and I get the installer window asking if I want to install flash player.  I click on the option to always install and never prompt and then click on ok.  I go to numerous other different websites with flash and then all of a sudden I get the installer window again. It's almost like something is turning off or uninstalling the flash player.  I click on ok and everything is fine.  

I have ran spybot search and destroy, malwarebytes and superantispyware.  I found and fixed a few things while in safemode.  When I run spybot search and destroy it always detects virtumonde.sdn and fixes it but then when I run it again it's there.  Not sure what type of spyware this is.  
Thank you in advance.

Let's get rid of the virtumonde infection first.
Give this a try, VundoFix 7.0.6, You can get it here:
http://www.softpedia.com/progDownload/VundoFix-Download-33165.html

Post back if you need more help.

is the vundofix a malware remover or does it just fix virtumonde only?  Does it need to be run in safe mode?

It was specially made for virtumonde and right now we know that is what your system is infected with.

does it need to be run in safemode?

It comes with directions but I don't think so. Been a while since I used it.

great, I'll try it now and post back in a few minutes

Which flash player are you trying to install?
Try this one,http://get.adobe.com/flashplayer/
Post back.

the Virtumonde didn't find any infected files.  Running spybot search and destroy again to see if it finds it again.  It's found it twice and said that it fixed it but couldn't.  Would hijackthis possibly work?

Where is spybot finding it? If it's in "System Volume Information" folder, then don't worry about it.

I just re-ran the scan and it found virtumonde again.  I fixed it and ran the scan again and it found it again.  It's telling me that it's a registry key:  hkey local machine/software/microsoft/windowsnt/currentversion/windows/applnit_dlls=....cryptsvc32.....
questions:
Would hijack this be able to possibly fix?
would it be better to find and delete the dll file that it keeps listing?
or any other suggestions?

virtumonde.sdn is the culprit and renames the dll file each time I scan and fix I think....

Open regedit. Click on Start then Run then type in regedit <Enter>

Click on Edit, then select Find

Search for virtumonde.sdn

Does it find it? In the left panel, right click on the folder that contains it and select Copy Key Name

Post back with a list of all the keys you find it in.

"System Volume Information" folder ......I'm sorry but where does it tell me which folder that it finds it in?

If it's renaming the file then it is active. Disregard what I asked about System Volume Information folder.

Go here http://www.kaspersky.com/kos/eng/partner/default/pages/default/check.html?n=1254690476564
Click accept then run,after download has finished click settings on the left make sure evrything is checked Spyware, adware,dialers and other potentially dangerous programs archives.
When scan is complete click view scan report then save report as (change file type to .txt)then post report here.

the answer to the question on the flashplayer is flash 10...newest one.  I will try kapersky

You can try this also http://www.tweak-uac.com/download/ set it to quiet mode

How do you set it to quiet mode?  Do I wait until it pops up to set it to quiet mode?

ok Ignore the last question I just ran tweakuac and figured that out.  I disabled the uac but I still have the installer pop up that is coming up everytime I go to a website that contains flash content.  Does that sound like spyware?  I can actually cancel it and still be able to view the flash content.  

Do the virus and malware scans com out clean? If not, I would resolve that first.

still get the virtuemondo.sdn when running spybot.  I will try finding it in the registry as you suggested above.

I did a search in the registry and didn't come up with anything on the find and search.

Download and install ComboFix from http://www.combofix.org/download.php.
Run it and follow the directions.
When it's finished change the log extension to .txt then post it back to us.
Restart your computer and see if Spybot is still finding  virtumonde.sdn
If it is, we have to know exactly what it is reporting about it.

go into add/remove programs remove any programs for example google toolbar, any antivirus except the one you use,and any anti malware except spybot.reboot computer after your done then run spybot again,and post back.

Also if you do peer to peer downloads you may want to scan your files where the downloads are kept .Delete those that are infected.

Can you also try uninstalling spybot then reinstalling it i,ve done some research this file may also be found in spybots temp folder after last update so I would uninstall and reinstall newest version of spybot and post back.

I also wanted to comment that some websites offer there own flash players and it will POP UP and offer it to you(unless you block pop ups from that site).From your last comment you said you could still watch the flash content.So that tells me that your getting pop ups wich has nothing to do with virtuemondo.sdn.But follow my earlier comments first then post back.If your not sure how to set up pop up blocker let us know.

ok, my computer is free from virus's that I can tell.  I'm still getting the windows installer popup.  I ran hijackthis and posting the log.  I also updated to windows vista 64 sp2 thinking it was a problem with the installer.  Do you see anything in the hijackthis?  The popup that says it wants to install is going to this website: www.adobe.com/shockwave/download/activex/flash/iewin32400.htm, which says that it no longer exists.  I will also try combofix.

combo fix doesn't work as it's not compatible with Vista 64.

Thats a good shockwave player go here run download,http://get.adobe.com/shockwave/
I really dont see anything wrong in the log you posted,also did you uninstall and reinstall spybot?
Before you run new scan click start then run type %temp% delete everything then run spybot scan.

is it possible to download an executable file of flash 10 so that I can install from the .exe?  So far all I can find is the link to download and install.