Found two worms or trojans in my startup...norton missed?

I’ve been having MAJOR problems with my computer lately…at first I thought my connection just sucked but then it started happening with all of my programs…freezing all of the time…then my computer beeps every once in awhile.

Anyhow before I had a bunch of things running in the back during the startup process so I figured I would check that again to see if that’s why it would take 10 minutes to restart the computer…and of course some of the things on the list I have know idea of what they are so I found a website that I could type the name in and it would tell me if I needed it or not.

Well supposedly I have two worms/trojans not sure which one they are that are on the start up list…Here is the startup list


igfxtray c:\windows\system32\igfxtray.exe
hkcmd c:\windows\system32\hkcmd.exe
igfxpers c:\windows\system32\igfxpers.exe
jusched c:\program files\java\jre1.6.0_07\bin\jusched.exe
synTPEnh c:\program files\synaptics\syntp\tyntpenh.exe
stsystra stsystra.exe
dvdlauncher c:\program files\cyberlink\powerdvd\dvdlauncher.exe
isuspm c:\progra~1\common~1\instal~1\update~1\isuspm.exe-startup
issch c:\program files\common files\installshield\updateservice\issch.exe"-start
qttask c:\program files\quicktime\qttask.exe"-atboottime
point32 c:\program files\microsoft intellipoint\point32.exe
imjmig c:\windows\ime\imjp8_1\imjpmig.exe"/spoil/remadvdef/migration32
imscinst c:\windows\system32\ime\pintlgnt\imscinst.exe/sync
tntsetp c:\windows system32\ime\tintlgnt\tntsetp.exe/sync
tntsetp c:\windows system32\ime\tintlgnt\tntsetp.exe/imename
realsched c:\program files\common files\real\update_ob\realsched.exe: _osboot
applesyncnotifier c:\program files\common files\apple\mobile device support\bin\applesyncnotifier.exe
ituneshelper c:\program files\itunes\ituneshelper.exe
dlactrlw c:\windows\system32\dla\slactrlw.exe
reader_sl c:\program files\adobe\reader 9.0\reader\reader_sl.exe
sprtcmd c:\program files\qwest\quickcare\bin\sprtcmd.exe /P quickcare
ctfmon c:\windows\system32\ctfmon.exe
msnmsgr c:\program files\windows live\messenger\msnmsgr.exe “/background
E_S1aC c:\windows\system32\spool\drivers\w32x86\3\e_faticea.exe/fu “c:\windows\temp\E_s1ac.tmp”/ef “hkcu”
teatimer c:\program files\spybot - search & destroy\teatimer.exe
digital line detect c:\progra~1\digita~1\dlg.exe
googledesktop c:\program files\google\google desktop search\googledesktop.exe”/startup
netwaiting c:\program files\netwaiting\newaiting.exe
skype c:\programfiles\skype\phone\skype.exe"/nosplash/minimized



so from what I have read…the ctfmon and the E_s1ac is bad…now I found directions to delete the ctfmon from the registry which I would like to include below in case something is not right…but I can not find any directions on getting rid of the E-S1AC and my virus scanners are not picking it up.

Any help/instructions would be great!!!



here are the instructions I found for deleting the first one:

Open Registry Editor
type hklm\software\microsoft\windows\currentversion\run
ctfmon
<windos folder>\cftmon.exe

(I guess it says if I type it in just like that it will delete this file of the registry?..is this correct or am I missing anything?  I kind of need idiot proof instructions)


Thank You!!!