winsync & syncroad

I've got a twist on the Winsync.exe problems you guys have been dealing with. While browsing the net a few hours ago and running a McAfee firewall, it popped up saying it detected a trojan and the trojan had been deleted. Obviously this was not the case as winsync now infects my computer. End process tree is not working, but here's the kicker...I don't have a run option to get into the registry neither in safe mode or standard, nor do I have any programs listed under "add/remove programs" There are 44 processes running including eber.exe, addtp.exe, lsass.exe, atltt.exe, amongst others I've never heard of. The only folder I can get into is the My Computer folder. When I click on "Start/all programs", nothing comes up. None of the shortcuts on the desktop work either, as I was trying to get into McAfee and see if I could clean this off. Appreciate any help you guys have...

 

chaslang,
After your first posting, I read the initial procedures and was only able to follow a couple steps due to the other problems. Let me begin by saying my system was full up until this trojan appeared today, so I'm not sure if I got something along with WinSync and SyncroAd or what. Specifically, following the steps in the link you sent,
Step 1: Disabling system restore --- can't do it because there is no computer icon on my XP desktop.
Step 2: Network security --- can't do it because the "run" option has been removed from my start menu
Step 3: Enabling hidden files --- done
Step 4 and subsequent steps: unable to download any programs to scan for viruses / spyware as buttons and options that I would normally have to open IE and do a search do not work

What I have done in safe mode is manually find the WinSync folder and SyncroAd folders and removed the files. I have also gone into the registry editor (again not via Run/regedit, but via start/my computer/C/windows/regedit icon and removed the SyncroAd file there. Then I went into msconfig/startup tab and unchecked specific programs that should not be running.

None of these things, with reboots have restored my lack of ability to run any programs on the desktop, nore have they restored the "run / find" options under the start menu.

What else do you think I can try, and does this problem sound like a different trojan that you're familiar with?

Thanks for the help.

 

Chaslang,
Amazingly, under the customize start menu you directed me to, "run" IS checked as a display option, yet something is inhibiting it from being displayed. Unfortunately, I don't have hijack this on that computer and since I can't add/remove programs or connect to the net, I can't think of any way to install it. I tried a McAfee re-install yesterday to see if I could get that running and clean off whatever trojan was dropped, but as soon as I pop the CD in the drive and double click on the install icon, nothing happens.
The only options I am afforded right now are task manager and navigating through the my computer folder to delete files. This is how I was able to "end process tree" yesterday and to delete the WinSync and SyncroAd files that I could find in the C:\Windows folder. Internet access is also inhibited, so I can't do any of those free online scans.
From what I can tell, it sounds to me like something in addition to WinSync and SyncroAd corrupted this machine and affected McAfee as well as every reboot is coupled with a error message saying to reinstall McAfee.
Here's a list of the processes running, the odd ones being the four svchost.exe files and the ones listed as "local service" and "network service" under the "User" column, since this computer is not connected to the internet.

Listed under "Local Service" as user: alg.exe, svchost.exe

Listed under "Network Service" svchost.exe

Listed under "Owner" as user: McVSEscn.exe, mcagent.exe, taskmgr.exe, tgcmd.exe, kbd.exe, hpmon05.exe, hpwuSchd.exe, hpqCmon.exe, hpsysdrv.exe, explorer.exe,

Listed under "System" as user: OPXPApp.exe, McShield.exe, svchost.exe (listed twice), ScsiAccess.exe, omniServ.exe, MpfService.exe, mcvsrte.exe, KodakCCS.exe, spoolsv.exe, lsass.exe, services.exe, winlogon.exe, csrss.exe, smss.exe, system and system idle process

If I can just restore some functionality to the system (i.e. being able to open McAfee, or re-install, or connect to the internet to do an online scan) then I think we might be on our way to fixing this thing, but right now, the system seems crippled.

Thanks so much for all your help.