Registry keys reappear after deleting

[Guest]

I cannot delete or modify anything listed under:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
They immedately reaapear and will not remove using msconfig either.
I have 5 startup items that do not exist and I have used Startup Remover
Buddy program and using paid version of Free Registryfix program, and nothing
will remove these entries.
I have McAfee AntiVirus installed and always updated, Ad-Aware paid version
with Adwatch running, Mcafee Firewall Plus, and Xp SP2 always updated. I even
tried deleting entries in safemode, and as soon as I restarted, the entries
were there again. Any suggestions? I cannot find anything about this, and
have been looking for about 5 days now for some fix for this. I am the only
person on this XP Pro computer w/all admin privilages.
Listed below are entries that will not go away:
1. "UpdateManager"=""C:\\Program Files\\Common Files\\Sonic\\Update
Manager\\sgtray.exe\" /r"
2. "dla"="C:\\WINDOWS\\system32\\dla\\tfswctrl.exe"
3. "mmtask"="-C:\\Program Files\\Musicmatch\\Musicmatch Jukebox\\mmtask.exe"
4. "nwiz"="-nwiz.exe /install"
5. "SPAMfighter Agent"="\"C:\\Program Files\\SPAMfighter\\SFAgent.exe\"
update delay 60"

 

[Nick Skrepetos \(SuperAdBlocker.com\)]

Hello,

This is the classic sign of spyware/adware on your system. It may be
installed as an AppInit_Dll, Kernel Driver that actually hides registry
entries and files from the operating system, or WinLogon Notify handler.

The fact that it comes back in Safe Mode pretty much eliminates the kernel
driver suspect as they are not loaded in Safe Mode (most of items we have
researched). The WinLogon and AppInit_Dll do load in Safe Mode.

You may wish to take a peek at your system using our
FileResearchCenter.com's free online scanner/process viewer here, it
supports Internet Explorer and FireFox.
http://www.fileresearchcenter.com

SuperAdBlocker.com has just released and update today to Super Ad Blocker
which includes the SuperAnitSpyware scanner that "should" detect, delete and
remove this pest permanently.

If this does not work, you can submit me a diagnostic of your system and I
can post my findings back to the group so all can benefit from the
information:
http://www.superadblocker.com/diagnostic.html?id=nicks

You can install and scan for free and then remove the product if you do not
chose to purchase it. Super Ad Blocker features a 15-day fully functional
trial period. We of course appreciate it when users purchase our products,
as we do put in thousands of hours of development into creating and
maintaining our products. We update our spyware definitions daily to keep up
with the latest threats.

If you, or any members of this group are interested in purchasing, we do
offer the MSGROUPS coupon for a 20% instant discount on purchases.

Either way, give Super Ad Blocker a try to rid your system of this pest. I
would be interested to know if it solves the problem for you.

Nick Skrepetos
SuperAdBlocker.com
http://www.superadblocker.com

 

[Guest]

Nick, I went to the link to run your spyware scanner, which found nothing. I
had the report sent to you with the following email address:
(e-mail address removed).
As I stated on my post, I have all Adaware. Spyware, AntiVirus, Firewall and
all MS updates to install automatically. I've even ran HiJack This to find
anything on my computer, and it's always showing clean. This registry thing
is something I've never run across before. The programs showing up do not
exist on my compter anywhere, and yet stay in my startup through msconfig. I
don't get any errors that windows is looking for them, and actually the only
annoyance is the fact that I know they're there, and I can't make them go
away.
Not sure what you need from me in your post about a diagnostic of my system,
but tell me what/how to get it, and I will send it. Thanks - bungiman
------------------------------------------------

 

[Nick Skrepetos \(SuperAdBlocker.com\)]

Did you do the diagnostic link below? I did not receive the report:
http://www.superadblocker.com/diagnostic.html?id=nicks

These types of items are often hard to track down when they hide themselves
from the operating system.

-Nick