Suddenly, I see all accounts

This is a rather odd problem which has just appeared. I can suddenly see into the folders of the three other users of my PC where I haven't been able to do so before. Although I am the principal user and "Owner" of the PC, I am no comfortable with this, and neither are they.
We still continue to log in using our passwords, but I can see their folders.

All account holders have clicked on the Properties of each account and the "Make Folder Private" box is checked in each case. It's a mystery...

Is there any explanation for this, and can we revert to the situation as it was before?

 

These are not system files, but user folders.

I have run a virus check and the only problem appears to be the line:-
C:\Windows\system32\dmysv.exe Reading error
I've run "dmysv.exe" through Google and there is no entry for it. Neither is there any entry on Window online help.
Does anyone know what this refers to and could it be the cause of the problem?

 

Fitz--I do not have dmysv.exe on my WinXP Pro SP2 hard drive.
You might want to run the procedure here
http://www.windowsbbs.com/showthread.php?t=37074

 

The only symptom so far is that I can see other users' folders. Nothing else appears to be wrong, and everything else works fine. However It's just baffling and bizzare that I can now see theirs and they can see mine, after 30 months of partition!
I've already run all the latest SpyWare (SpyWareBlaster, AdaAware6, SpyBot, etc., which I update every time I use them) and previously ran HJT and there were a couple of odd entries which were not ther before. I've fixed those, so here is the latest log:-

Logfile of HijackThis v1.99.0
Scan saved at 21:29:57, on 20/12/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\PROGRA~1\MUSICM~1\MUSICM~2\MMDiag.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mim.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Grisoft\AVG Free\avgcc.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Owner\My Documents\HiJack This\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Tiscali Internet Access
O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe "
O4 - HKLM\..\Run: [adiras] adiras.exe
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~2\mimboot.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Shaitan1678] powerdll.exe
O4 - HKLM\..\Run: [prcmon] systemdll.exe
O4 - HKLM\..\Run: [dmysv.exe] C:\WINDOWS\system32\dmysv.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.meshcomputers.com
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9B03C5F1-F5AB-47EE-937D-A8EDA626F876} (Anonymizer Anti-Spyware Scanner) - http://download.zonelabs.com/bin/promotions/spywaredetector/WebAAS.cab
O23 - Service: Ati HotKey Poller - Unknown - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

 

Fitz--I am not the resident expert on HJT logs. But two things
1) The version of HJT you used is not the latest. Might be well to get the latest and post the log from that.
http://www.spywareinfo.com/~merijn/downloads.html
2) Post the log on the WindowsBBS forum recommended
http://www.windowsbbs.com/forumdisplay.php?f=41
where it will get the best attention.

 

Thanks for that. I'll post a new HJT log, though I really cannot see anything there myself as I like to run a fairly "lean and clean" system.
As a temporary stopgap measure I've changed the other accounts to "Limited" and left my own as Administrator so I can still see the otehr accounts but they cannot see mine. However, I am still not comfortable with the situation and still have no idea how this has happened. How and why could any virus do this?