Hello to anyone who can help me out. My laptop is an Acer Aspire 5502ZWXCi. Running Windows XP Home Edition SP2 Version 2002 as OS. My problem: Disabled assign Manager add and the "Registry editing has been disabled by your administrator" warning when the user account is actually the administrator. Also right after every start-up the computer warns me that "Windows cannot find SSCVIIHOST exe..."I believe this problem arose when a lot of trojans and viruses creeped in my laptop after another user's usb was plugged in. I virus-scanned this laptop using AntiVir and deleted all executable files and some dlls. And moved to quarantine to all other dlls that contained codes of some trojans and viruses. Below is my hijackthis log. What to do? Thanks in go for any cyber tech guy or gal who can helpLogfile of HijackThis v1.99.1Scan saved at 11:43:22 AM on 8/2/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16414)Running processes:C:\WINDOWS\System32\smss exeC:\WINDOWS\system32\winlogon exeC:\WINDOWS\system32\services exeC:\WINDOWS\system32\lsass exeC:\WINDOWS\system32\svchost exeC:\WINDOWS\System32\svchost exeC:\Program Files\Intel\Wireless\Bin\EvtEng exeC:\Program Files\Intel\Wireless\Bin\S24EvMon exeC:\WINDOWS\system32\brsvc01a exeC:\WINDOWS\system32\spoolsv exeC:\WINDOWS\system32\brss01a exeC:\WINDOWS\Explorer exeC:\Program Files\AntiVir PersonalEdition Classic\avguard exeC:\acer\Empowering Technology\ePower\epm-dm exeC:\WINDOWS\system32\ctfmon exeC:\Program Files\AntiVir PersonalEdition Classic\sched exeC:\Program Files\Grisoft\AVG Anti-Spyware 7.5\follow exeC:\Acer\Empowering Technology\admServ exeC:\WINDOWS\system32\Brmfrmps exeC:\WINDOWS\system32\crypserv exeC:\Program Files\Intel\Wireless\Bin\RegSrvc exeC:\WINDOWS\system32\svchost exeC:\Program Files\Plone 2\Python\PythonService exeC:\Program Files\Plone 2\Python\python exeC:\WINDOWS\system32\fxssvc exeC:\schedule Files\Yahoo!\Messenger\YahooMessenger exeC:\WINDOWS\system32\mdm exeC:\Program Files\Mozilla Firefox\firefox exeC:\Program Files\Mozilla Thunderbird\thunderbird exeC:\Documents and Settings\dcccii\Desktop\hijackthis\HijackThis exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,examine Bar = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,go away summon = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,go away summon = R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyServer = proxy skyinet net:3128R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt dllF2 - REG:system ini: Shell=Explorer exe SSCVIIHOST exeF2 - REG:system ini: UserInit=userinit exe,C:\WINDOWS\system\svchost ex eO2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt dllO2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv dllO2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient dllO3 - Toolbar: Acer eDataSecurity Management - {0E1230F8-EA50-42A9-983C-D22ABC2EED3B} - C:\WINDOWS\system32\ToolBand dllO3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient dllO3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt dllO4 - HKLM\..\Run: [Acer ePower Management] C:\Acer\Empowering Technology\ePower\Acer ePower Management exe bootO4 - HKLM\..\Run: [CorelDRAW Graphics Suite 11b] C:\Program Files\Corel\Corel Graphics 12\Languages\EN\Programs\Registration exe /call="CorelDRAW Graphics Suite 12" /go out=012707 serial=DR12WTX-9999998-YSP lang=ENO4 - HKLM\..\Run: [epm-dm] c:\acer\Empowering Technology\ePower\epm-dm exeO4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc exe -startguiO4 - HKCU\..\Run: [ctfmon exe] C:\WINDOWS\system32\ctfmon exeO4 - HKCU\..\Run: [Yahoo! Pager] "C:\schedule Files\Yahoo!\Messenger\YahooMessenger exe" -quietO4 - HKCU\..\Run: [Yahoo Messengger] C:\WINDOWS\system32\scvhost exeO7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Pol icies\System. DisableRegedit=1O8 - Extra context menu item: &Sample Toolband Serach - res://C:\WINDOWS\system32\ToolBand dll/MENUSEARCH. HTMO8 - Extra context menu item: Convert cerebrate target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient dll/AcroIECapture htmlO8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient dll/AcroIEAppend htmlO8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient dll/AcroIECaptureSelLinks htmlO8 - Extra context menu item: Convert selected links to existing PDF - res://C:\schedule Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient dll/AcroIEAppendSelLinks htmlO8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\schedule Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient dll/AcroIECapture htmlO8 - Extra context menu item: Convert selection to existing PDF - res://C:\schedule Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient dll/AcroIEAppend htmlO8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient dll/AcroIECapture htmlO8 - Extra context menu item: Convert to existing PDF - res://C:\schedule Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient dll/AcroIEAppend htmlO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL. EXE/3000O9 - Extra button: (no label) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\schedule Files\Java\jre1.5.0_06\bin\ssv dllO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR. DLLO9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag exe (register missing)O9 - Extra 'Tools' menuitem: @xpsp3res dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag exe (register missing)O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\schedule Files\Messenger\msmsgs exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs exeO9 - Extra button: (no label) - SolidConverterPDF - (no register) (HKCU)O10 - Broken Internet find because of LSP provider 'c:\program files\newdotnet\newdotnet7_22 dll' missingO11 - Options group: [INTERNATIONAL] International*O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper dllO16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B}.
Forex Groups - Tips on Trading
Related article:
http://www.cybertechhelp.com/forums/showthread.php?t=164132
comments | Add comment | Report as Spam
|