is yt8a.exe a virus

[shyman]

I have a pc running Windows XP with Service pack 3. My pc was running fine untill yesterday that I got a message that popped up from the Spybot program saying that there has been a change made in the registry "C:/WINDOWS/system32/yt8a.exe". So I just didnt care about it and took the deny change option. But the problem here is after denying the message, I still get it continously appearing again and again. So can someone please tell me how to get rid of this message forever. Is this some kind of a virus? Thanks for any information.

[Zachary]

I think that your pc is infected by a virus / malware. So try scanning your pc with some good antivirus programs. You can also use HijackThis or Combofix to scan reports of your system and afterwards copy and paste the report here.

HijackThis - HijackThis - How to use HijackThis? What it dose?

Combofix -http://forums.techarena.in/guides-tutorials/1196920.htm

[shyman]

here is the report
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:57:41, on 19/10/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 SP3 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C: \ WINDOWS \ System32 \ smss.exe
C: \ WINDOWS \ system32 \ winlogon.exe
C: \ WINDOWS \ system32 \ services.exe
C: \ WINDOWS \ system32 \ lsass.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ System32 \ svchost.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ Program Files \ Intel \ Wireless \ Bin \ evteng.exe
C: \ Program Files \ Intel \ Wireless \ Bin \ s24evmon.exe
C: \ WINDOWS \ explorer.exe
C: \ WINDOWS \ system32 \ spoolsv.exe
C: \ Acer \ eManager \ anbmServ.exe
C: \ Program Files \ Intel \ Wireless \ Bin \ RegSrvc.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ System32 \ TUProgSt.exe
C: \ Program Files \ PC Connectivity Solution \ ServiceLayer.exe
C: \ Program Files \ HPQ \ jusched.exe
C: \ Program Files \ HPQ \ jusched.exe
C: \ WINDOWS \ CTHELPER.EXE
C: \ acer \ epm \ epm-dm.exe
C: \ WINDOWS \ system32 \ wscntfy.exe
C: \ Program Files \ Mozilla Firefox \ firefox.exe
C: \ Program Files \ Foxit Software \ Foxit Reader \ Foxit Reader.exe
C: \ Documents and Settings \ el laptop \ Desktop \ rrr.exe

[Big Fish]

Download random's system information tool (RSITY) by random and save it on the desktop.
http://images.malwareremoval.com/random/RSIT.exe
Double-click to launch RSIT.exe or RSITY.
Click Continue at the disclaimer screen.
If the tool HijackThis (current version) is not present or not detected on your computer, download the RSITY (allow access in your firewall, if requested) and you must accept the license.
When the scan is complete, two text files will open. Post the contents of log.txt (<<will be displayed)
as well as info.txt (<<will be reduced in the taskbar).
Note: Reports are saved in the folder C: \ RSiT

[Mr. Boo Bear]

Downloads UsbFix on your desktop

-> Launch the installation with the default settings

Connect your external data sources to your PC (USB, external drive, etc ...) suceptible have been infected without opening them.

-> Double-click the shortcut UsbFix on your desktop

-> Choose the option Cleaning

-> The pc will reboot

-> After reboot post the report UsbFix.txt