unwanted prgram v2

[stuart flury]

Re :unwanted program

http://www.computerhope.com/cgi-bin/yabb/YaBB.cgi?board=1;action=display;num=1100596297

Thanks mektek and merlin_2 but I have tried deleting the registry key but it keeps returning to startup toolbar and my computer. below is an excerpt from hijack this if anybody can tell what I need to do to remove this program for good and any other rogue programs anyone can spot that might be related(ps had to install a new regedit program dont know if this is connected)


Thanks





StartupList report, 20/11/2004, 17:21:59
StartupList version: 1.52
Started from : A:\HijackThis.EXE
Detected: Windows 2000  (WinNT 5.00.2195)
Detected: Internet Explorer v5.00 (5.00.2920.0000)
* Using default options
* Including empty and uninteresting sections
* Showing rarely important sections
==================================================

Running processes:

C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\LEXBCES.EXE
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\ati2evxx.exe
C:\WINNT\System32\cisvc.exe
C:\WINNT\System32\svchos1.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\Explorer.exe
C:\WINNT\System32\Atiptaxx.exe
C:\WINNT\System32\teekids.exe
C:\WINNT\System32\cidaemon.exe
C:\WINNT\FindSex.exe
C:\WINNT\System32\MDM.EXE
A:\HijackThis.exe

Listing of startup folders:

Shell folders Startup:
[C:\Documents and Settings\Administrator\Start Menu\Programs\Startup]
*No files*

Shell folders AltStartup:
*Folder not found*

User shell folders Startup:
*Folder not found*

User shell folders AltStartup:
*Folder not found*

Shell folders Common Startup:
[C:\Documents and Settings\All Users\Start Menu\Programs\Startup]
Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE

Shell folders Common AltStartup:
*Folder not found*

User shell folders Common Startup:
*Folder not found*

User shell folders Alternate Common Startup:
*Folder not found*

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINNT\system32\userinit.exe,

[HKLM\Software\Microsoft\Windows\CurrentVersion\Winlogon]
*Registry key not found*

[HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
*Registry value not found*

[HKCU\Software\Microsoft\Windows\CurrentVersion\Winlogon]
*Registry key not found*

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

Synchronization Manager = mobsync.exe /logon
AtiPTA = Atiptaxx.exe
PrinTray = C:\WINNT\System32\spool\DRIVERS\W32X86\3\printray.exe
Microsoft Inet Xp.. = teekids.exe
Configuration Loading = svchos1.exe
LexStart =
FindSex = C:\WINNT\FindSex.exe -n



[{89820200-ECBD-11cf-8B85-00AA005B4340}] *
StubPath = regsvr32.exe /s /n /i:U shell32.dll

[{89820200-ECBD-11cf-8B85-00AA005B4383}] *
StubPath = %SystemRoot%\system32\ie4uinit.exe

[{9EF0045A-CDD9-438e-95E6-02B9AFEC8E11}] *
StubPath = %SystemRoot%\System32\updcrl.exe -e -u %SystemRoot%\System32\verisignpub1.crl

[merlin_2]

C:\WINNT\FindSex.exe ...................shift it....
C:\WINNT\System32\ati2evxx.exe ...maybe modem

C:\WINNT\System32\Atiptaxx.exe ......maybe modem
C:\WINNT\System32\teekids.exe .....unless you have
C:\WINNT\System32\cidaemon.exe...loaded them suspect....download spysweeper from webroot..com...forget spybot..its not that good...trust me on this one... and if you need to check any more this link will help>http://answersthatwork.com/Tasklist_pages/tasklist.htm