My spyware program (Pcguard) is telling me i have a enum/legacy/iprip stored under the one of the hkey registry files. I have located it by hand as my spyware program is useless but i cannot delete it. Can anyone help?

Hi welcome to PCHF is the PC running windows 98?

Nope, its on Xp, showing how crappy my anti-spyware program really is. I cant delete the registry files and when i shut down the PC it comes up with a window saying shutting down prgram freedom hidden window something something. This is really starting to annoy me now as nothing i do seems to get rid of it.

Hello Oli and welcome to PCHF
Please click the Prework link in my signiture and create a new topic in the HiJackThis! Log forum containing the resulting logs from Prework, ( HiJackThis! Logs - PC Help Forum - Free PC Help ).
This will allow our security team to analyze the logs and help clear your computer of any virus/spyware etc.
If you need help during the Prework, just ask and a member will guide you through it

Hi Oli et al
I appear to have a similar problem. I have been using PCGuard on an XP PC and the anti-spyware component (recently) repeatedly comes up with a warning:
"Anti-spyware failed to delete Pripi. To learn more, refer to our spyware centre.
Spyware item location
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\legacy_iprip
Visit the Spyware Centre"
Visiting the PCGuard support centre found no information on the alleged spyware, and no support worth the name, and no obvious route to discuss this with them.
This has only happened over the last few days.
Googling the reference in the registry lead to notes on backdoor.ripiner, trojan.linkmediac, linkmedia, and portless; but on searching my PC I could find none of the other named files associated with these. Nor can I find a file called ipripsvc.dll referred to in the hijack this log thread.
Security scans online via Symantec did not find anything.
AVG Anti spyware and superantispyware found tracking cookies but nothing which appeared to be associated with iprip/pripi.
The pripi mesage continued.
Security scans online via Windows Live Onecare safety Scanner found some additional items and issues the most significant being some old temporary internet files with traces of infection with trojandownloader:js/pysme.gen (which had been missed by previous anti-virus scans - norton, AVG, PCGuard).
Is it possible that the Pripi reference may be a fault with a recent update to PCGuard, rather than all the other software being incompetent, particularly as you (Oli616) appear to have found the problem at around the same time?
I have now uninstalled PCGuard and am trying OneCare.
But is the problem gone or now hidden?

Ive submitted my Hijack this log to that part of the forum as linked to in the post above yours. The problem has not disappeared yet, im still working out how to get rid of it.
SORRY!