Vista - Hkey rat

Ive got the following:

hkey_local_machine\software\microsoft\windows\currentversion\run

CMJSpy 0.5 RAT Spyware

And my Anti-spy is saying it cannot quarantine due to administrative rights or something, anyone know how i get rid of it??

What anti spyware program are you using? Malwarebytes is good, A squared Free and Spybot SD are also good. Do you have an Antivirus program installed as well? If not, Avast Home is very good, I would suggest you install it and run a boot time scan and a normal scan. One of these programs should get rid of it. If it tells you that you can not quarentine because of admin rights then close the program and right click on the icon and click run as administrator, then scan.

Im using Yahoo toolbar Antispy, i've got Avast home aswell but its not picking it up, i've seen on another thread how to get to the following:

Start key -Run,
Type REGEDIT and hit return

I dont know what to do from there though....

If it's from yahoo toolbar antispy, it's probably a false positive. I could not trust Yahoo antispyware because it gave me too many FPs.Try those other programs and run them as they are all free and see what you get. If it doesn't come up in any of those, it's probably a false positive. Try cleaning your temp files. You can use CCleaner to do that. It might clear it. There are also online scanners that don't need to be installed, ESET NOD online scanner, Dr. Web, etc. Post back if any of that helps.

Im running that Spybot SD now, hopefully that will sort it out, its looking like its picked up a few things so far...

Thanks for the advice

Well if you know how to open the registry editor (Start - Run - Regedit <enter> ),

then you can manually navigate to

hkey_local_machine\software\microsoft\windows\currentversion\run

by pressing the + sign next to each of the above in the above order.
When you reach to RUN, on the right side you will find several listings.

Select the "CMJSpy 0.5 RAT Spyware" item or anything containing that and delete it. (right click-delete).

Close the regisry editor and it's gone.
Restart and if you see it again, you'll need one of the programs Airbot mentioned before

Regards

Ok im up to that point but dont know which one is the ''Rat'' ...... Im confused

Well if you see
hkey_local_machine\software\microsoft\windows\currentversion\run (monitor) then delete it and restart.
Read this
CMJSpy


Or any entry that says cmj rat then that would be it but if nothing looks out of place then like I said, it's probably a false positive. You should be able to run your browser as administator and run the toolbar and then quarantine it if you're worried. Right click on your browser icon and run as admin. If you ran all those programs and none of them picked it up then it's most likely that the toolbar is recognizing some entry as spyware when in fact it isn't. Yahoo antispy is far from perfect, as I said it picked up false positives for me when there was no infection.

Read this, if you see any startup entries that look out of place or say cmj rat then disable it and delete.

Startup Programs - Enable or Disable

Post back with results.

If you're having trouble, you can upload an image of your Run contents in the registry and we'll try to identify the rat. Although Spybot-SD is usually able to clean all these after an update and a full scan

Cheers its gone...

You've been a great help