wmplayer.exe

thought i'd start a new post seems different virus = new problem

people who've just been helping me will/should know what i'm on about and thanks to them for helping me.managed to delete 3 worms and now onto my last 1.in my registry there's the following registry keys HKLM\software\microsoft\windows\currentversion\run\windows media player=wmplayer.exe
HKLM\software\microsoft\windows\currentversion\runservices\windows media player=wmplayer.exe

and when i do msconfig on the startup tab there's wmplayer.exe selected to start up.i've tried deselecting it and restart pc but it still starts up,and i've also tried deleting the registry keys but neither idea works.i've tried housecall but that doesn't detect it and i've tried sophos way of removing it (creating a cd with emeergency program on,floppy with virus definitions on then booting in safe mode)however,that way doesn't detect the worm either.or it justdidn't scan the pc properly but who knows

here's my process explorer

Process PID CPU Description Company Name
System Idle Process 0 92
Interrupts n/a Hardware Interrupts
DPCs n/a Deferred Procedure Calls
System 4
smss.exe 420 Windows NT Session Manager Microsoft Corporation
csrss.exe 480 Client Server Runtime Process Microsoft Corporation
winlogon.exe 504 Windows NT Logon Application Microsoft Corporation
services.exe 548 3 Services and Controller app Microsoft Corporation
svchost.exe 724 Generic Host Process for Win32 Services Microsoft Corporation
urlmap.exe 888 Money URL Map Microsoft Corporation
svchost.exe 748 Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 880 Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 920 Generic Host Process for Win32 Services Microsoft Corporation
spoolsv.exe 1016 Spooler SubSystem App Microsoft Corporation
alg.exe 1116 Application Layer Gateway Service Microsoft Corporation
SAgent2.exe 1132 EPSON Printer Status Agent SEIKO EPSON CORPORATION
wanmpsvc.exe 1324 Wan Miniport (ATW) Service America Online, Inc.
wmplayer.exe 1356 3
lsass.exe 560 LSA Shell (Export Version) Microsoft Corporation
explorer.exe 140 Windows Explorer Microsoft Corporation
IEXPLORE.EXE 1840 Internet Explorer Microsoft Corporation
procexp.exe 396 2 Sysinternals Process Explorer Sysinternals

Process: Procexp Pid: -2

Type Name

i've tried killing the process but does not work as it just re-appears
i'll paste my hijackthis log into another thread