ntmlsvc reboot problem

[sluggoaudio]

I've been having a problem with frequent, spontaneous reboots with Xp Pro,
even in safe mode. Checking the system logs, I keep seeing references to
"ntmlsvc service not found". I did some research, and I seemed to have solved
my problem by deleting NtmlSvc under these 2 registry keys:
HKLM\SYSTEM\ControlSet001\Services, and ControlSet002\Services. So far my
system is stable again. I cleaned out all my Temp files, and turned System
Restore off and then on.
My question is: there is still a registry key with ntmlsvc in it:
HKLM\SYSTEM\ENUM\ROOT\LEGACYNTMLSVC . Should I delete this too, or is this a
valid key?
Thanks in advance.

 

[Mark L. Ferguson]

BackDoor-Icug: http://vil.nai.com/vil/content/v_142500.htm

I would take anything out with that name.

 

[sluggoaudio]

Thanks for your reply: Things got more interesting: there are actually 3
LEGACY_NTMLSVC keys, in CurrentControlSet, ControlSet001, and Controlset002,
each with a single subkey "0000" containing all the same entries. I checked
another computer's registry (Xp Home SP2) and there were no NTMLSVC entries
anywhere, so I went ahead and tried to delete the keys in the infected
machine: in each case (either the legacy or the 000 subkey) I got an "Error
while deleting key" message! The machine is still stable after a day, and I'm
getting right to the edge of my comfort zone in fiddling with the registry,
but I thought I should post this update.