when i open the C drive theres loads of folders appearing.they are labelled like dc9f174cc00f8c722c06b2b313 and inside them there is a file called msxml4-KB927978-enu.i looked at some of it.it says stuff like [11:02:36:156]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'c:\'.
MSI (s) (A4:18) [11:02:36:156]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.Modifying WindowsFolder.0E9F98FC_A692_A6DF_FF6B_D6B9ABF34537 property. Its current value is 'C:\WINDOWS\'. Its new value: 'c:\WINDOWS\'.more folders just keep appearing.why is this happening?
Logfile of HijackThis v1.99.1
Scan saved at 3:08:05 PM, on 5/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Looks like you got a downloader and a couple of Trojans. Maybe something worse. Let's try something before we get any crazy ideas.
First of all, extract HijackThis to its own folder. This allows it to make backups in case you or I make a mistake.
Afterwards, open HijackThis. Do a scan and place checks besides ALL the O1 files (the ones that go "O1 - Hosts:). You have 12. Do not click "Fix Checked" yet.
Secondly, the F2 Proxy Override and several O4s are caused by the W32-RBOT-AUU worm. This worm does allow remote access to your computer, as well as record keystrokes, turn off antivirus, and download malicious code from the Internet. Place check marks beside the following as well:
Close all Internet Explorer and Firefox windows and click "Fix Checked".
I just want to try something. Go to Start Menu and click "Run". In the box, type "regedit" (without quotes). If it works, close it. If it doesn't, tell me.
Open HijackThis again and click on the Misc Tools section. In the Misc Tools tab, click on "Open Uninstall Manager". Press "Save List", open the list, and post the list in your reply.
Next, click "back". Go to misc tools again and open the hosts file manager. Click "Open in Notepad". Copy the contents of that file and paste it in your reply.
In your reply I want:
* A log of the HijackThis Uninstall Manager
* A log of your Hosts file (from HijackThis)
* A new HijackThis logfile
”Torrent
ABITEQ
AC3Filter (remove only)
Ad-Aware SE Personal
Adobe Acrobat 5.0
Adobe Photoshop 7.0
Adware Away v2.2.8.9
Age of Empires III
Alias DirectConnect 2.0
Athlon 64 Processor Driver
Audacity 1.2.6
AVG Anti-Virus 7.1
AVIcodec (remove only)
AviSynth 2.5
Codec Pack - All In 1 6.0.3.0
DivX
DivX ;-) Audio Compressor 4.02
Download Accelerator Plus (DAP)
DVD Decrypter (Remove Only)
DVD Shrink 3.2
dvdSanta 4.00
EAX4 Unified Redist
Elecard MPEG-2 Decoder&Streaming Pack
EXPERTool
FlashFXP v3
FlashMenu
Google Earth
Half-Life(R) 2
HijackThis 1.99.1
HP Photo and Imaging 2.0 - All-in-One
HP Photo and Imaging 2.0 - All-in-One Drivers
HP Photo and Imaging 2.0 - hp psc 1200 series
hp psc 1200 series
InterVideo WinDVD
iTunes
J2SE Runtime Environment 5.0 Update 1
J2SE Runtime Environment 5.0 Update 4
J2SE Runtime Environment 5.0 Update 6
Kazaa Lite K++ v2.4.3
LimeWire PRO 4.12.3
Macromedia Flash Player 8
Maya 7.0
Microsoft .NET Framework 1.1
MSN
MSXML4 Parser
Native Instruments Traktor DJ Studio 3
Nero 6 Ultra Edition
Nero 7 Ultra Edition
NVIDIA Drivers
PCI Audio Driver
QuickTime
RealPlayer
Realtek AC'97 Audio
Reason 3.0.4
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893066)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB896688)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899588)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB905915)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB908531)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912812)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB916281)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922760)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB923694)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925454)
Security Update for Windows XP (KB925486)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928090)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929969)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931768)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Sentinel System Driver
SpeechRedist
Spybot - Search & Destroy 1.4
Steam(TM)
Update for Windows XP (KB894391)
Update for Windows XP (KB896727)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB910437)
Update for Windows XP (KB911280)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB929338)
Update for Windows XP (KB930916)
Update for Windows XP (KB931836)
WIBU-KEY Setup (WIBU-KEY Remove)
Windows Defender Signatures
Windows Installer 3.1 (KB893803)
Windows Media Format Runtime
Windows Media Player 10
Windows XP Hotfix - KB873333
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB891781
Windows XP Hotfix - KB893086
WinMX
WinPcap 3.1
WinRAR archiver
XP-Tweaking Tools 4.0
XviD MPEG-4 Video codec
well, the only thing i can say is to re-install windwows, formatting your harddrive, (using the regular formatting, not fast) and this should solve the problem...
