Hey guys,

This is my first post on this forum. I found this forum while looking for help with my problem with a tricky program that keeps putting itself in my AppInit_DLLs registry key at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows. The appinit_dlls points to a "XMwrap32.dll", googling it I find nothing! I am using Windows XP Home and running Adaware and hijackthis. Adaware says my system is clean, and HJT shows this problem. Here is what I have done:

1. Updated Adware and Ran it, said system is clean.
2. Ran HJT, shows this DLL, I "fix" it, restart, and it is still there.
1. Everytime I try to delete it in regedit, it re appears.
2. I restarted in safe mode and applied a registry patch (.reg file) that resets the Appinit_dlls key.

Obviosuly the .dll is loaded by windows and keeps replacing itself in the registry key. How can I get rid of this, not knowing what it is? Is there a way to remove this reg key in DOS or something? confused.gif

Thanks!

Justin


Here is my HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 2:48:56 PM, on 2/7/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
C:\Progr