rowell
Topic Starter
Dear Tech Expert,
Good morning!
It started when I got files from other collegues when I encounter a folder that when you click it is an executable file and my usb have all of that, that for each name of folder it duplicate another folder which is an executable file and I accidentally double click it on a thought that it is a folder containing files.
I'm having a difficulty going out to windows performing command, regedit and ms config the system told me that I have no admin authorization where in fact I have the admin priviledges to access it.
My AVG scanner scanning for almost 12 hours and the scanning process still not finished.
Thank you hope to hear from you. GODspeed!
Best regards,
Rowell
here's my logfile:
Logfile of HijackThis v1.99.1
Scan saved at 11:21:07 AM, on 10/29/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\xampp\apache\bin\apache.exe
D:\opt\AVG Anti-Spyware 7.5\guard.exe
D:\opt\avgamsvr.exe
D:\opt\avgupsvc.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\xampp\mysql\bin\mysqld-nt.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\SSCVIIHOST.exe
C:\WINDOWS\VMSnap3.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
D:\opt\avgcc.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\System32\SSCVIIHOST.exe
C:\xampp\apache\bin\apache.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
D:\opt\HijackThis 1.99.1\HijackThis.exe
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts:
O1 - Hosts:
O1 - Hosts:
O1 - Hosts:
O1 - Hosts: Site Unavailable
O1 - Hosts:
O1 - Hosts:
O1 - Hosts:
O1 - Hosts:
O1 - Hosts:
O1 - Hosts:
O1 - Hosts:
O1 - Hosts:
O1 - Hosts:
O1 - Hosts:
O1 - Hosts:
O1 - Hosts:
O1 - Hosts: Click to load external image (1)
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [VMSnap3] C:\WINDOWS\VMSnap3.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [BigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)
O4 - HKLM\..\Run: [AVG7_CC] D:\opt\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [Yahoo Messengger] C:\WINDOWS\System32\SSCVIIHOST.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Apache2 - Unknown owner - C:\xampp\apache\bin\apache.exe" -k runservice (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - D:\opt\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - D:\opt\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - D:\opt\avgupsvc.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: FileZilla Server FTP server (FileZilla Server) - Unknown owner - D:\opt\FileZilla Server\FileZilla Server.exe (file missing)
O23 - Service: mysql - Unknown owner - C:\xampp\mysql\bin\mysqld-nt.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe[external image: Yahoo! GeoCities]
O1 - Hosts: GeoCities Home - Yahoo! - Help
O1 - Hosts:
O1 - Hosts:
O1 - Hosts:
O1 - Hosts:
O1 - Hosts: Sorry, this GeoCities site is currently unavailable.
O1 - Hosts: The GeoCities web site you were trying to view has temporarily exceeded its data transfer limit. Please try again later.
O1 - Hosts:Are you the site owner? O1 - Hosts: Avoid service interruptions in the future by increasing your data transfer limit! O1 - Hosts: Find out how.
O1 - Hosts:Learn more about data transfer.
O1 - Hosts:
O1 - Hosts: [external image: Yahoo! GeoCities]
O1 - Hosts:
O1 - Hosts: SPONSORED LINKS
O1 - Hosts: –>
O1 - Hosts:
O1 - Hosts:
O1 - Hosts: Yahoo! Web Hosting
O1 - Hosts: $25 Setup Waived
O1 - Hosts: O1 - Hosts: $25 Setup Waived
Reliable plans include domain & 24x7 support.
O1 - Hosts: webhosting.yahoo.com
O1 - Hosts:
O1 - Hosts:
O1 - Hosts: Domain Names from Yahoo! only $9.95/yr
O1 - Hosts: Includes starter web page, email & domain forwarding, 24x7 support.
O1 - Hosts: domains.yahoo.com
O1 - Hosts:
O1 - Hosts:
O1 - Hosts: Yahoo! Business Email
Domain Included
O1 - Hosts: Domain Included
Setup fee waived. Up to 10 emails, SpamGuard, forwarding & virus scanning.
O1 - Hosts: smallbusiness.yahoo.com
O1 - Hosts:
O1 - Hosts:
O1 - Hosts: Ecommerce from Yahoo!
1 Month Free
O1 - Hosts: 1 Month Free
$50 setup fee waived. A reliable ecommerce plan, 24x7 support.
O1 - Hosts: smallbusiness.yahoo.com
O1 - Hosts:
O1 - Hosts: Get your own web site at
Yahoo! GeoCities O1 - Hosts: [external image: Hosted by Yahoo! Web Hosting] O1 - Hosts:
O1 - Hosts: Yahoo! GeoCities O1 - Hosts: [external image: Hosted by Yahoo! Web Hosting] O1 - Hosts:
O1 - Hosts:
O1 - Hosts: Copyright © O1 - Hosts: 2005 Yahoo! Inc. All rights reserved
O1 - Hosts: Privacy Policy O1 - Hosts: - Copyright Policy O1 - Hosts: - Guidelines O1 - Hosts: - Terms of Service O1 - Hosts: - Help O1 - Hosts:
O1 - Hosts: O1 - Hosts: Copyright © O1 - Hosts: 2005 Yahoo! Inc. All rights reserved
O1 - Hosts: Privacy Policy O1 - Hosts: - Copyright Policy O1 - Hosts: - Guidelines O1 - Hosts: - Terms of Service O1 - Hosts: - Help O1 - Hosts: