Interesting Spyware Problem!

[ChasMays]

After running Spybot and cleaning up the Registry (WinXPPRO) I have
two Registry Keys that are constantly re-creating themselves after I
delete them, usually within like 5 seconds (one named "4N3N#9P5BCG#GM"
and the other is "mqcewrtui"). Plus,there are also a few processes
running that if I end the task they pop back in under new randomized
names. I searched the Registry and have deleted EVERYTRHING that even
remotely seems suspect. But they keep running and reappearing. Any
ideas?

[YoKenny]

ChasMays wrote:
> After running Spybot and cleaning up the Registry (WinXPPRO) I have
> two Registry Keys that are constantly re-creating themselves after I
> delete them, usually within like 5 seconds (one named "4N3N#9P5BCG#GM"
> and the other is "mqcewrtui"). Plus,there are also a few processes
> running that if I end the task they pop back in under new randomized
> names. I searched the Registry and have deleted EVERYTRHING that even
> remotely seems suspect. But they keep running and reappearing. Any
> ideas?

Looks like it might be the peper trojan.
http://forums.tomcoyote.org/index.php?showtopic=1248

You need to run HijackThis to find the offending application.

[TomT]

cmajewski@myway.com (ChasMays) wrote:

>After running Spybot and cleaning up the Registry (WinXPPRO) I have
>two Registry Keys that are constantly re-creating themselves after I
>delete them, usually within like 5 seconds (one named "4N3N#9P5BCG#GM"
>and the other is "mqcewrtui"). Plus,there are also a few processes
>running that if I end the task they pop back in under new randomized
>names. I searched the Registry and have deleted EVERYTRHING that even
>remotely seems suspect. But they keep running and reappearing. Any
>ideas?

Not sure about the Registry keys but some AV scanner files change
their names at random - - - I believe Trojan Hunter is one of them.

TomT