Downloader.MisleadApp- What can I do to remove it?

[GillesPantin]

Hi,
I have Downloader.MisleadApp on my computer, I do every things on Symantec Web site,
but at this end, I have to choise what it's right or not in Regedit :

"Navigate to the following registry subkey and delete any entries that refer to the originally installed executable:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run"

I have a lot of things in it, and I'm affraid to remove something I do not remove!

Is threre somebody to help me? thank you

Thank you for your help
Gilles

I put this link, may be it's interreting for an expert ?
http://hjt.networktechs.com/parse.php?log=344472

[TurcoLoco]

Hello Gilles,

Please do NOT remove anything from the registry, even if a reputable web site tells you to, not at least you backup your registry using a program like ERUNT first.

Then, I'd suggest you go through all the steps in PP's sticky and do them thoroughly. Once you are done, run another HJT scan and attach your log to your next post and one of us will get back to you, ok?

Also you have too many startup entries that are either likely to be malware related or simply unnecessary, download and use StartupControlPanel to DISABLE the ones I mention below by unchecking the boxes next to them in the program, ok? If need to re-enable an entry, checking its box would do it but the ones I will list are the ones are either useless or the ones you do not want in startup!

O4 - HKLM\..\Run: [MoneyStartUp10.0] "C:\Program Files\Microsoft Money\System\Activation.exe"
MoneyStartUp10.0
tipIDs[tipIDs.length] = "88"
O4 - HKLM\..\Run: [MAGIXautostart] Q:\install\program\setup.exe
tipIDs[tipIDs.length] = "89"tipIDs[tipIDs.length] = "90"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
tipIDs[tipIDs.length] = "91"
O4 - HKLM\..\Run: [RemoteControl] C:\Program Files\ASUS\ASUS Remote\RemoteControlAppl.exe
RemoteControl
"Remote Control background application for Cyberlink's PowerDVD version 4 and above. Enables you to use a remote control with your DVD drive if your drive came with one. Not required if you don't have a remote control
tipIDs[tipIDs.length] = "93"
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
PCMService
"Part of Cyberlink's Power Cinema. Commonly distributed with the Dell MultiMedia software suite. It is used to watch movies
tipIDs[tipIDs.length] = "94"tipIDs[tipIDs.length] = "95"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Real Alternative\Update_OB\realsched.exe" -osboot

tipIDs[tipIDs.length] = "100"O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
RealTray System Tray icon for RealPlayer. If you subsequently start RealPlayer manually it adds itself back to the start-up list. You can stop this from happening by right-clicking on the tray icon and disabling StartCenter via Preferences
tipIDs[tipIDs.length] = "101"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 5.0\apdproxy.exe"
Adobe Photo Downloader "Part of Adobe's Photoshop Album or Photoshop Elements packages - starts each time you connect an external image device to your PC (see here)"
tipIDs[tipIDs.length] = "102"tipIDs[tipIDs.length] = "103"tipIDs[tipIDs.length] = "104"
O4 - HKLM\..\Run: [udinajkv.exe] C:\Documents and Settings\All Users\Application Data\udinajkv.exe
tipIDs[tipIDs.length] = "105"
O4 - HKLM\..\Run: [SSBkgdUpdate] C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot
SSBkgdUpdate ScanSoft OmniPage auto updater. Can be disabled using the main program's options
tipIDs[tipIDs.length] = "106"tipIDs[tipIDs.length] = "107"tipIDs[tipIDs.length] = "108"tipIDs[tipIDs.length] = "109"
O4 - HKLM\..\Run: [SC2] C:\WINDOWS\system32\scchk32.exe
tipIDs[tipIDs.length] = "110"tipIDs[tipIDs.length] = "111"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
MSMSGS "Windows Messenger utility. If you don't use Windows Messenger
tipIDs[tipIDs.length] = "112"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
msnmsgr "MSN Messenger utility. If you don't use MSN Messenger delete this entry.
tipIDs[tipIDs.length] = "115"
O4 - HKCU\..\Run: [Power2GoExpress] "C:\Program Files\CyberLink\Power2Go\Power2GoExpress.exe"
Power2GoExpress "Power2GoExpress - all media disc burning software" redundant if you are using Nero already.
tipIDs[tipIDs.length] = "116"
O4 - HKCU\..\Run: [Aureon 5.1 Fun Mixer] C:\WINDOWS\System32\Aureon 5.1 Fun Mixer.exe /minimize
tipIDs[tipIDs.length] = "117"
O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
Creative Detector
"Auto-detect and play a DVD when using a Creative Soundblaster Audigy2 soundcard. Uses about 2.2 MB of memory. Disable it by heading to the MediaSource DVD Audio Player
tipIDs[tipIDs.length] = "118"tipIDs[tipIDs.length] = "120"
tipIDs[tipIDs.length] = "121"O4 - Global Startup: RAID Manager.lnk = ? (always DELETE the ones with a question mark, they are invalid (missing executables) entries)


tipIDs[tipIDs.length] = "122"O4 - Global Startup: Reality Fusion GameCam SE.lnk = ?

~TL