1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Trojan Horse Pakes.l

Discussion in 'Virus & Other Malware Removal' started by Ham1204, Apr 1, 2008.

Thread Status:
Not open for further replies.
Advertisement
  1. Ham1204

    Ham1204 Thread Starter

    Joined:
    Mar 31, 2008
    Messages:
    12
    First, thanks for this forum. I have been fighting a Trojan Horse Pakes.l. I read one of your postings from 2007 and though that I could use your advice to someone else with a trojan horse problem to help me through this situation. With Windows XP, I use AVG and had Adware. I have not been able to eliminate this virus as yet. You recommended downloading a free trial of webroot spysweeper which you provided a link. Apparently there is no longer a free trial, do you have any other spyware you would recommend? I did download the "Hijack This" software and ran the problem. Didn't understand it but have the necessary output if needed for your info. Don't want to waste your time, just thought if you knew of a program that would help me in finding this nusiance I would greatly appreciate it.
     
  2. sjpritch25

    sjpritch25

    Joined:
    Sep 8, 2005
    Messages:
    9,113
    Welcome to TSG :)

    i seriously doubt SpySweeper will fully remove the infection.

    Please click Here to download HijackThis to your desktop.

    Click the Download button. When the Trend Micro HJT install box appears, double click on the HJTInstall.exe. Click on Install.

    It will be installed by default here: C:\Program Files\Trend Micro\HijackThis

    A shortcut to the application will also be placed on your Desktop.

    The program will open automatically after installation.

    You can double-click the icon that was placed on the Desktop to run subsequent HijackThis scans or you can use the icon inside the folder. The folder HijackThis is where you will find the HJT logs that you save. When you use the application to remove anything, you will also find the backup copies made by HJT inside this folder.

    Close all other windows except HijackThis.

    Click on "Do a system scan and save logfile" When the log pops up in Notepad, copy and paste that file back here.

    Do NOT have HijackThis fix anything yet. Most of what it finds will be harmless or even required.
     
  3. Ham1204

    Ham1204 Thread Starter

    Joined:
    Mar 31, 2008
    Messages:
    12
    Here is the log as requested. Thanks for your time.



    Logfile of HijackThis v1.99.1
    Scan saved at 3:55:01 PM, on 4/1/2008
    Platform: Windows XP (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
    C:\WINDOWS\Explorer.EXE
    C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
    C:\WINACS\ACSTRAY.EXE
    C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Upward League Manager\X_LeagueManagerUpdate.exe
    C:\PROGRA~1\Grisoft\AVG7\avgw.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\Program Files\HijackThis\HijackThis.exe
    C:\Program Files\Internet Explorer\iexplore.exe

    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O4 - HKLM\..\Run: [AVG7_CC] "C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" /STARTUP
    O4 - HKLM\..\Run: [ACSTray] C:\WINACS\ACSTRAY.EXE
    O4 - HKLM\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe /startintray
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - Global Startup: Upward League Manager - Auto Update.lnk = C:\Program Files\Upward League Manager\LeagueManagerUpdate.exe
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/win...ls/en/x86/client/wuweb_site.cab?1206981638166
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = HOME4YOURHEART.local
    O17 - HKLM\Software\..\Telephony: DomainName = HOME4YOURHEART.local
    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = HOME4YOURHEART.local
    O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = HOME4YOURHEART.local
    O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
     
  4. sjpritch25

    sjpritch25

    Joined:
    Sep 8, 2005
    Messages:
    9,113
    Please perform a scan with Kaspersky Webscan Online Virus Scanner

    1. Read the Requirements and Privacy statement, then select "Accept". 2. A new window will appear promting you to install an ActiveX component from Kaspersky - "Do you want to install this software?". 3. Click "Yes" or select "Install" to download the ActiveX controls that allows ActiveScan to run. 4. When the download is complete it will say ready, click "Next". 5. Click "Scan Settings" and check the option to use the Extended Database if available otherwise Standard). 6. Click "Scan Options" and select both "Scan Archives" and "Scan Mail Bases". 7. Click "OK". 8. Under "Select a target to scan", click on "My Computer". 9. When the scan is complete choose to save the results as "Save as Text" named kaspersky.txt to your desktop and post them in your next reply.

    Kaspersky does not remove anything but will provide a log of anything it finds. On August 8th, 2006 Kaspersky updated the software used for Free Online Virus Scanner. In order to continue using the online scanner you will need to uninstall the old version (if previously used) from your Add/Remove Programs list and then install the latest version. To do this, follow the steps here and reboot afterwards if your system does not reboot automatically or it will show 'Kaspersky Online Scanner license key was not found!
     
  5. Ham1204

    Ham1204 Thread Starter

    Joined:
    Mar 31, 2008
    Messages:
    12
    Sorry, it has taken so long. The computer in question is in our office and I'm not able to get to it as quickly as I would like. I didn't think to add that the computer is connected to a network, so when Kaspersky scan My computer I thought it would scan only what was on this hard drive but it went to the server as well so this could be rather lengthy.

    Total number of scanned objects: 179625
    Number of viruses found: 2
    Number of infected objects: 3
    Number of suspicious objects: 0
    Duration of the scan process: 04:26:39


    KASPERSKY ONLINE SCANNER REPORT
    Wednesday, April 02, 2008 6:54:12 PM
    Operating System: Microsoft Windows XP Professional, (Build 2600)
    Kaspersky Online Scanner version: 5.0.98.0
    Kaspersky Anti-Virus database last update: 2/04/2008
    Kaspersky Anti-Virus database records: 677952
    -------------------------------------------------------------------------------

    Scan Settings:
    Scan using the following antivirus database: extended
    Scan Archives: true
    Scan Mail Bases: true

    Scan Target - My Computer:
    A:\
    C:\
    D:\
    I:\
    M:\
    N:\

    Scan Statistics:
    Total number of scanned objects: 179625
    Number of viruses found: 2
    Number of infected objects: 3
    Number of suspicious objects: 0
    Duration of the scan process: 04:26:39

    Infected Object Name / Virus Name / Last Action
    C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped
    C:\Documents and Settings\All Users.WINDOWS\Application Data\avg7\Log\emc.log Object is locked skipped
    C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
    C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
    C:\Documents and Settings\lisah.HOME4YOURHEART\Application Data\AVG7\l_000103.log Object is locked skipped
    C:\Documents and Settings\lisah.HOME4YOURHEART\Application Data\Webroot\Spy Sweeper\Logs\080402115510.ses Object is locked skipped
    C:\Documents and Settings\lisah.HOME4YOURHEART\Cookies\index.dat Object is locked skipped
    C:\Documents and Settings\lisah.HOME4YOURHEART\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
    C:\Documents and Settings\lisah.HOME4YOURHEART\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
    C:\Documents and Settings\lisah.HOME4YOURHEART\Local Settings\History\History.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\lisah.HOME4YOURHEART\Local Settings\History\History.IE5\MSHist012008040220080403\index.dat Object is locked skipped
    C:\Documents and Settings\lisah.HOME4YOURHEART\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\lisah.HOME4YOURHEART\NTUSER.DAT Object is locked skipped
    C:\Documents and Settings\lisah.HOME4YOURHEART\ntuser.dat.LOG Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Data\settings.dat Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS00BAF2E2-06A3-47C8-8E99-146E0571001A.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS011CCEAE-D28F-496B-9D67-E1A473F58E55.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS049163B2-B817-478D-B5CF-108FA12439C8.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS08119CB7-7D43-4983-9982-7F6DC6F98FDC.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS0C7AD069-26B2-4D34-9B8B-48ED8FF83AEE.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS0E2C13E3-67B8-44DC-A3C3-1801ABB46E7D.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS12832CA8-DCC1-4D1C-991A-C732EF72A445.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS13C48757-AB77-4D0B-B6D8-BF9511889589.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS1421BD54-D13A-45C2-88DF-9F07F62AEE5D.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS16292519-5E36-4630-840C-67067044E4A8.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS16A98E65-A55F-4871-BEC9-89459FF3F7F2.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS170173F3-7F49-4152-B7D2-470F1A44F9CF.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS17AE0A48-F9F8-4345-BBE5-43DC85CBB621.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS18701892-9FE3-488C-874A-7E579ADB6E46.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS1E17ECBB-9902-4509-B9C6-1C361A1C4F90.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS20B589EA-0475-44B0-B7B9-FE10EF80D076.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS27FA0643-4F3C-43D0-899C-C6A4BF6A7D61.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS289215E2-F3C8-48F5-8212-F570F65D9E33.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS28D9E9E2-1307-4AF0-8A24-F5A9A1E3FB49.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS2DD2D65D-6DD0-452B-9F04-2562C5C90FDE.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS2F0564CD-8EA5-4B23-BD5C-70CD7D478B73.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS33A66981-316E-428B-A19D-99FCD37284F6.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS34BD5F0B-1BD5-4D99-AA1D-65C544C3F44A.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS35B11D33-2527-4224-85BF-5EAE1B3DEA4D.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS36318956-14A4-4DB1-A561-AB6B5C8AD034.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS394FA6E0-C5D9-4F87-AED1-98EA687FA96A.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS3A47E5E8-EE5A-470D-BA75-60E4F940D0A0.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS3FC946D7-0CD8-4CE1-8A93-3F8B79C5B447.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS4A3DCE79-B5E4-4F20-8A7C-044B9E5CFDE2.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS4B528BFE-50B0-41F1-A15C-5267A9944143.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS4CA69DAF-FD21-4C7A-985B-40AF4C1E3EEF.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS4F46D8B8-8604-49BC-97BD-1C9CDF1490F7.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS4F73C3B6-75C7-4E59-8C08-E4F135D409D3.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS5945642C-953C-4057-B1F6-42BAFE9F5F98.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS598856FC-DAC2-4F11-828D-60990A03C8B6.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS5BD0CF62-5A47-423F-9A95-38B29A4B96E7.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS63803D2E-9732-44D4-85F8-8134F90AC23D.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS64D76873-B031-41F2-A8AA-56BA36275A73.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS6663FAB1-4A23-4F1B-B41F-9B68560271A0.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS670F9E77-1000-45EA-8D4F-96D4FECFA729.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS67F7BD8D-366C-4D85-B183-C80F4DDE9D5C.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS68075F33-25EC-4586-9DD8-15678D9B6AA4.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS688ACEAB-017D-4038-9718-0CB58F317E94.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS68EB4F01-2890-4048-9E92-133AE0C20588.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS69823D18-F0D8-4238-A0C1-9AB5682E29CC.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS6A8464D2-396B-4B62-AD40-CB71C67C256F.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS6C77DF05-480E-466B-A3E9-6ED47668A3D0.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS7060515C-2CF0-4741-A698-7599A9AA4E2F.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS75A2EB11-203E-481A-A3C6-E7CB770B5C9D.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS7CB42BAA-64DC-4ED2-855D-04903AF05C12.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS88A77EE3-7314-47EE-97C7-9D298F0ED5C7.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS8B889DA3-96D0-4880-8926-42D0A9DC8ABF.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS9087120E-8DE4-445A-AEE7-CA8DC59237AE.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS92CBCEA5-6DA0-4A96-B81D-7C71CCFF1966.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS96162E2B-0A38-4FB7-9D4E-44D9A7F7CE86.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS999160B9-B56C-45BC-8938-BAAC20805F5E.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMS9B7266DD-1F16-44CE-AAA6-07E3ADD2025C.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSA05A790F-0171-43C2-98C0-2BE4BDBC0B53.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSA3B29896-42EA-47A9-8DA1-2A7DA6453766.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSA85FC7E7-B865-4D03-9334-D7BC03E45232.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSA8BAB499-0861-49AD-AC20-8B77F09758B3.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSA93ADF1D-F9FD-4608-8B15-8B7FC033788F.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSAA7798FA-1C40-4BDF-8B8B-A756936925D0.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSAF1EFF87-03F8-4C3F-A09B-E8E7A566B858.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSAF9B6895-8BFC-4C89-B3D9-AAEA3CF57A76.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSB0B4F257-A6CA-4A36-9C75-65D87340D634.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSB1467749-C1A0-4EE2-B0F9-E436DFE33743.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSB9168AFD-FD46-49D4-8FAB-D015D8BF1A59.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSBD23DCA8-9291-4469-A55B-81AAC061E7C2.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSBF89EEDC-5CB1-426F-BF9A-4B38ABFD11F2.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSBFCC3184-7251-409D-A474-75F9EA02CC85.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSC01A32A8-043C-4B47-8F50-05221A6F2211.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSC04F1DF0-03AF-449A-A864-2FDC20D22EAF.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSC8146D2B-CDC7-45C9-8D82-3B45CF9447C5.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSCA176C12-006A-4E00-917D-4AAB8F91DEEB.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSCA8F5020-0D8F-4350-B745-3196D4FA49DB.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSCB5E72A0-8082-4801-A329-4F5C4AED138F.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSCC14F56A-1283-499D-BD07-85EF531C62B0.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSDAFAEF88-5D8B-4A4B-95EE-D517CA1AAF57.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSE0EF6895-00CA-4AFD-AEC4-EAEE7347D509.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSE17B6AD2-3B9C-4105-B27B-588661CA342A.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSE24490F0-DD51-4DA3-ACB7-530330B70A96.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSE4BAE74B-A03B-4A32-A94A-890CA75E18BC.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSE4D7BF65-1F87-416D-9C2B-89E14C338BC8.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSE829EED8-E198-4CAB-98DC-CDFBB30F5536.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSEBD50016-B975-493B-B7EC-CCF9515F0A45.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSF001529C-9D0D-483B-9F29-A6B9441D3664.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSF22755A5-F009-49EF-B5B3-61DDE6632826.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Webroot\Spy Sweeper\Temp\SSMSFA96BB46-670A-485B-B0BB-44DC18C20708.tmp Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Cookies\index.dat Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\History\History.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\NTUSER.DAT Object is locked skipped
    C:\Documents and Settings\LocalService.NT AUTHORITY\ntuser.dat.LOG Object is locked skipped
    C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
    C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
    C:\Documents and Settings\NetworkService.NT AUTHORITY\NTUSER.DAT Object is locked skipped
    C:\Documents and Settings\NetworkService.NT AUTHORITY\ntuser.dat.LOG Object is locked skipped
    C:\Program Files\Blue Coat K9 Web Protection\cwmlog.txt Object is locked skipped
    C:\Program Files\Blue Coat K9 Web Protection\urls.log Object is locked skipped
    C:\Program Files\Webroot\Spy Sweeper\Masters\masters.bak Object is locked skipped
    C:\Program Files\Webroot\Spy Sweeper\Masters\Masters.const Object is locked skipped
    C:\Program Files\Webroot\Spy Sweeper\Masters\masters.mst Object is locked skipped
    C:\Program Files\Webroot\Spy Sweeper\Masters.base Object is locked skipped
    C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
    C:\System Volume Information\_restore{31630094-3007-49F2-8D10-24F164C7D6B9}\RP114\A0005170.ver Object is locked skipped
    C:\System Volume Information\_restore{31630094-3007-49F2-8D10-24F164C7D6B9}\RP114\A0005171.inf Object is locked skipped
    C:\System Volume Information\_restore{31630094-3007-49F2-8D10-24F164C7D6B9}\RP114\A0005172.exe Object is locked skipped
    C:\System Volume Information\_restore{31630094-3007-49F2-8D10-24F164C7D6B9}\RP114\A0005173.dll Object is locked skipped
    C:\System Volume Information\_restore{31630094-3007-49F2-8D10-24F164C7D6B9}\RP114\A0005174.dll Object is locked skipped
    C:\System Volume Information\_restore{31630094-3007-49F2-8D10-24F164C7D6B9}\RP114\A0005175.cat Object is locked skipped
    C:\System Volume Information\_restore{31630094-3007-49F2-8D10-24F164C7D6B9}\RP114\A0005176.exe Object is locked skipped
    C:\System Volume Information\_restore{31630094-3007-49F2-8D10-24F164C7D6B9}\RP114\A0005177.exe Object is locked skipped
    C:\System Volume Information\_restore{31630094-3007-49F2-8D10-24F164C7D6B9}\RP114\A0005178.dll Object is locked skipped
    C:\System Volume Information\_restore{31630094-3007-49F2-8D10-24F164C7D6B9}\RP114\A0005179.dll Object is locked skipped
    C:\System Volume Information\_restore{31630094-3007-49F2-8D10-24F164C7D6B9}\RP114\A0005180.dll Object is locked skipped
    C:\System Volume Information\_restore{31630094-3007-49F2-8D10-24F164C7D6B9}\RP115\A0005185.TTF Object is locked skipped
    C:\System Volume Information\_restore{31630094-3007-49F2-8D10-24F164C7D6B9}\RP115\A0005186.dll Object is locked skipped
    C:\System Volume Information\_restore{31630094-3007-49F2-8D10-24F164C7D6B9}\RP115\A0005187.cat Object is locked skipped
    C:\System Volume Information\_restore{31630094-3007-49F2-8D10-24F164C7D6B9}\RP115\A0005188.exe Object is locked skipped
    C:\System Volume Information\_restore{31630094-3007-49F2-8D10-24F164C7D6B9}\RP115\A0005189.CAT Object is locked skipped
    C:\System Volume Information\_restore{31630094-3007-49F2-8D10-24F164C7D6B9}\RP115\A0005190.dll Object is locked skipped
    C:\System Volume Information\_restore{31630094-3007-49F2-8D10-24F164C7D6B9}\RP115\A0005191.inf Object is locked skipped
    C:\System Volume Information\_restore{31630094-3007-49F2-8D10-24F164C7D6B9}\RP115\A0005192.exe Object is locked skipped
    C:\System Volume Information\_restore{31630094-3007-49F2-8D10-24F164C7D6B9}\RP115\A0005193.inf Object is locked skipped
    C:\System Volume Information\_restore{31630094-3007-49F2-8D10-24F164C7D6B9}\RP115\A0005194.inf Object is locked skipped
    C:\System Volume Information\_restore{31630094-3007-49F2-8D10-24F164C7D6B9}\RP115\A0005195.inf Object is locked skipped
    C:\System Volume Information\_restore{31630094-3007-49F2-8D10-24F164C7D6B9}\RP115\A0005196.ver Object is locked skipped
    C:\System Volume Information\_restore{31630094-3007-49F2-8D10-24F164C7D6B9}\RP87\A0004660.exe Object is locked skipped
    C:\System Volume Information\_restore{65A79465-0DD4-4AE5-8638-CE0E2AA510C6}\RP7\change.log Object is locked skipped
    C:\WINDOWS\CSC\00000001 Object is locked skipped
    C:\WINDOWS\Debug\Netlogon.log Object is locked skipped
    C:\WINDOWS\Debug\oakley.log Object is locked skipped
    C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
    C:\WINDOWS\SchedLgU.Txt Object is locked skipped
    C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
    C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
    C:\WINDOWS\system32\config\default Object is locked skipped
    C:\WINDOWS\system32\config\default.LOG Object is locked skipped
    C:\WINDOWS\system32\config\SAM Object is locked skipped
    C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
    C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
    C:\WINDOWS\system32\config\SECURITY Object is locked skipped
    C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
    C:\WINDOWS\system32\config\software Object is locked skipped
    C:\WINDOWS\system32\config\software.LOG Object is locked skipped
    C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
    C:\WINDOWS\system32\config\system Object is locked skipped
    C:\WINDOWS\system32\config\system.LOG Object is locked skipped
    C:\WINDOWS\system32\h323log.txt Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
    C:\WINDOWS\WindowsUpdate.log Object is locked skipped
     
  6. Ham1204

    Ham1204 Thread Starter

    Joined:
    Mar 31, 2008
    Messages:
    12
    Having to divide due to length.


    I:\ACSNET\ACSDATA\awcbcnfg.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awcbcnfg.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awgeclog.acsblb Object is locked skipped
    I:\ACSNET\ACSDATA\awgeclog.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awgeclog.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awgeele.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awgeele.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awgeemap.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awgeemap.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awgefnum.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awgefnum.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\Awgemods.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\Awgemods.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awgename.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awgename.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awgetplt.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awgetplt.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awgezip2.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awgezip2.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\AWGLORG.DB Object is locked skipped
    I:\ACSNET\ACSDATA\AWGLORG.PX Object is locked skipped
    I:\ACSNET\ACSDATA\awgrevnt.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awgrevnt.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awgrgrp.acsblb Object is locked skipped
    I:\ACSNET\ACSDATA\awgrgrp.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awgrgrp.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awgrgrre.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awgrgrre.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awgrindv.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awgrindv.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awgrmast.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awgrmast.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awgrresf.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awgrresf.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awgrrost.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awgrrost.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\aworname.acsblb Object is locked skipped
    I:\ACSNET\ACSDATA\aworname.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\aworname.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awpeadch.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awpeadch.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awpeaddr.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awpeaddr.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awpecnfg.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awpecnfg.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awpecnty.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awpecnty.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awpecomt.acsblb Object is locked skipped
    I:\ACSNET\ACSDATA\awpecomt.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awpecomt.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awpeenv.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awpeenv.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awpefaml.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awpefaml.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awpeindv.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awpeindv.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awpelabl.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awpelabl.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awpephne.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awpephne.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awpepict.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awpepict.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awperelt.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awperelt.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awsrcnfg.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awsrcnfg.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awsrdetl.acsblb Object is locked skipped
    I:\ACSNET\ACSDATA\awsrdetl.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awsrdetl.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awsrflds.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awsrflds.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awsrmast.acsblb Object is locked skipped
    I:\ACSNET\ACSDATA\awsrmast.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awsrmast.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awsrrslt.acsblb Object is locked skipped
    I:\ACSNET\ACSDATA\awsrrslt.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awsrrslt.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\Awusrcfg.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\Awusrcfg.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awusrdfo.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awusrdfo.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awusrgrd.acsblb Object is locked skipped
    I:\ACSNET\ACSDATA\awusrgrd.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awusrgrd.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\Awusrlmt.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\Awusrlmt.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\Awusrlog.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\Awusrlog.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\Awusrmst.acsblb Object is locked skipped
    I:\ACSNET\ACSDATA\Awusrmst.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\Awusrmst.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awusropt.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awusropt.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awusrper.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awusrper.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\Awusrpfl.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\Awusrpfl.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awvtdesc.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awvtdesc.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awvtresi.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awvtresi.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awvtresp.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awvtresp.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\awvttran.acsblb Object is locked skipped
    I:\ACSNET\ACSDATA\awvttran.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\awvttran.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\bettyjo\awapdst.db Object is locked skipped
    I:\ACSNET\ACSDATA\bettyjo\awapdst.PX Object is locked skipped
    I:\ACSNET\ACSDATA\bettyjo\awapinv.db Object is locked skipped
    I:\ACSNET\ACSDATA\bettyjo\awapinv.PX Object is locked skipped
    I:\ACSNET\ACSDATA\bettyjo\AWAPOUT.DB Object is locked skipped
    I:\ACSNET\ACSDATA\bettyjo\dbisam.lck Object is locked skipped
    I:\ACSNET\ACSDATA\bettyjo\PDOXUSRS.LCK Object is locked skipped
    I:\ACSNET\ACSDATA\dbisam.lck Object is locked skipped
    I:\ACSNET\ACSDATA\ginny\dbisam.lck Object is locked skipped
    I:\ACSNET\ACSDATA\karen\awgesort.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\karen\awgesort.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\karen\awsrudet.acsblb Object is locked skipped
    I:\ACSNET\ACSDATA\karen\awsrudet.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\karen\awsrudet.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\karen\awsrumst.acsblb Object is locked skipped
    I:\ACSNET\ACSDATA\karen\awsrumst.acsdat Object is locked skipped
    I:\ACSNET\ACSDATA\karen\awsrumst.acsidx Object is locked skipped
    I:\ACSNET\ACSDATA\karen\dbisam.lck Object is locked skipped
    I:\ACSNET\ACSDATA\PDOXUSRS.LCK Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\achapbrk.DB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\achapbrk.PX Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\achprbrk.acsdat Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\achprbrk.acsidx Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapaddr.DB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapaddr.PX Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapchk.DB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapchk.PX Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapchk.XG0 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapchk.XG1 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapchk.XG2 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapchk.YG0 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapchk.YG1 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapchk.YG2 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapchkd.DB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapchkd.PX Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapchkd.XG0 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapchkd.YG0 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapcnfg.DB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapdst.DB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapdst.PX Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapdst.XG0 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapdst.XG1 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapdst.YG0 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapdst.YG1 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapinv.DB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapinv.PX Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapinv.XG0 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapinv.XG1 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapinv.XG2 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapinv.XG3 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapinv.XG4 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapinv.XG5 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapinv.YG1 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapinv.YG2 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapinv.YG5 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\Awaplist.db Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapminv.DB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapminv.XG3 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapphne.DB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapvndr.DB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awapvndr.PX Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awarcust.MB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\AWARSCFG.MB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awarstmt.MB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglacct.DB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglacct.MB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglacct.PX Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglacct.X02 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglacct.Y02 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglbach.DB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglbach.PX Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglbank.DB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglbank.MB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglbank.PX Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglbank.XG0 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglbank.YG0 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglbdgt.DB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglbdgt.PX Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglcnfg.DB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awGLDocs.acsdat Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awGLDocs.acsidx Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglentr.DB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglentr.PX Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglentr.XG0 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglentr.YG0 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglfund.DB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglfund.PX Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglment.DB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglment.PX Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglmtrn.db Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglmtrn.px Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglmtrn.xg0 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglmtrn.xg1 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglmtrn.yg0 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglmtrn.yg1 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglpaye.DB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglpaye.MB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglpaye.PX Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglpaye.XG2 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\Awglpost.db Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\Awglpost.PX Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglproj.DB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglsrce.DB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awglsrce.PX Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awgltran.DB Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awgltran.PX Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awgltran.XG0 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awgltran.XG1 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awgltran.XG2 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awgltran.XG3 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awgltran.XG4 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awgltran.XG5 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awgltran.XG6 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awgltran.XG7 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awgltran.YG0 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awgltran.YG1 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awgltran.YG2 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awgltran.YG3 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awgltran.YG4 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awgltran.YG5 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awgltran.YG6 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awgltran.YG7 Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awprcost.acsdat Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awprcost.acsidx Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awprddep.acsdat Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awprddep.acsidx Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awprptyp.acsdat Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\awprptyp.acsidx Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\dbisam.lck Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\EMPL.acsblb Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\EMPL.acsdat Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\EMPL.acsidx Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\EMPLVAC.acsdat Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\EMPLVAC.acsidx Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\PDOXUSRS.LCK Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\SYS.acsdat Object is locked skipped
    I:\ACSNET\ACSFDAT\DATA1\SYS.acsidx Object is locked skipped
    I:\ACSNET\PDOXUSRS.NET Object is locked skipped
    N:\Alecia\Music Library\Orchestra Lable.doc Object is locked skipped
    N:\David Booth\Tools\crossloopsetup.exe/file54 Infected: not-a-virus:RemoteAdmin.Win32.WinVNC-based.h skipped
    N:\David Booth\Tools\crossloopsetup.exe/file55 Infected: not-a-virus:RemoteAdmin.Win32.WinVNC-based.b skipped
    N:\David Booth\Tools\crossloopsetup.exe Inno: infected - 2 skipped

    Scan process completed.
     
  7. sjpritch25

    sjpritch25

    Joined:
    Sep 8, 2005
    Messages:
    9,113
    Where did AVG found the virus???
     
  8. Ham1204

    Ham1204 Thread Starter

    Joined:
    Mar 31, 2008
    Messages:
    12
    c:\documents and settings\karen.HOME4YOURHEART\local settings\temp\da2d4d.tmp
    From here the temp files change
    da5E.tmp
    datD4
    DatE6
    datE6
    dat151
    etc. approx. 53 to 55 listings

    I've thought that avg was taking care of the virus and I cleared temp files, but it reoccurs almost daily. I'm not that savy and I'm being thrown in to learn by immersion about a lot of things. I'm trying to understand what and why and how as I go through daily problems. I am "assuming" since I've reinstalled windows xp on this system I'm thinking the virus is hiding somewhere and I just don't know where to look. Can it be in a profile. I was told the roaming profiles were disabled, but this is the only computer that is having the trouble. Our server is windows 2003 and it has symantec on it and I've been keeping a close watch on it, a few virus hit but were eliminated and no problems in a month or two. I very much appreciate your time and help.
     
  9. sjpritch25

    sjpritch25

    Joined:
    Sep 8, 2005
    Messages:
    9,113
    Well, its just a temp file. Let run a standalone scanner and see if it picks anything up. If not, then it may be a false positive.

    Please download DrWeb-CureIt & save it to your desktop. DO NOT perform a scan yet.

    Reboot your computer in "SAFE MODE" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".

    Scan with DrWeb-CureIt as follows:
    • Double-click on cureit.exe to start the program. An "Express Scan of your PC" notice will appear.
    • Under "Start the Express Scan Now", Click "OK" to start. This is a short scan that will scan the files currently running in memory and when something is found, click the Yes button when it asks you if you want to cure it.
    • Once the short scan has finished, Click Options > Change settings
    • Choose the "Scan tab" and UNcheck "Heuristic analysis"
    • Back at the main window, click "Select drives" (a red dot will show which drives have been chosen)
    • Then click the "Start/Stop Scanning" button (green arrow on the right) and the scan will start.
    • When done, a message will be displayed at the bottom advising if any viruses were found.
    • Click "Yes to all" if it asks if you want to cure/move the file.
    • When the scan has finished, look if you can see the icon next to the files found. If so, click it, then click the next icon right below and select "Move incurable". (This will move it to the C:\Documents and Settings\userprofile\DoctorWeb\Quarantine folder if it can't be cured)
    • Next, in the Dr.Web CureIt menu on top, click file and choose save report list.
    • Save the DrWeb.csv report to your desktop.
    • Exit Dr.Web Cureit when done.
    • Important! Reboot your computer because it could be possible that files in use will be moved/deleted during reboot.
    • After reboot, post the contents of the log from Dr.Web in your next reply. (You can use Notepad to open the DrWeb.cvs report)
     
  10. Ham1204

    Ham1204 Thread Starter

    Joined:
    Mar 31, 2008
    Messages:
    12
    In safe mode, I can not log on the system. It doesn't accept my user name or password
     
  11. Ham1204

    Ham1204 Thread Starter

    Joined:
    Mar 31, 2008
    Messages:
    12
    Added note, when I'm logged in as administrator no virus. However, when I log in as a user within a few minutes the Trojan Horse Pakies.I appears.
     
  12. sjpritch25

    sjpritch25

    Joined:
    Sep 8, 2005
    Messages:
    9,113
    In Safe Mode, did you log in as adminstrator or as your username. Use your username. See if that works.
     
  13. Ham1204

    Ham1204 Thread Starter

    Joined:
    Mar 31, 2008
    Messages:
    12
  14. sjpritch25

    sjpritch25

    Joined:
    Sep 8, 2005
    Messages:
    9,113
    Run the scan in Normal Mode, but make sure you disable your current Anti-Virus program.
     
  15. Ham1204

    Ham1204 Thread Starter

    Joined:
    Mar 31, 2008
    Messages:
    12
    This will only scan the hard drive at this workstation and not try to link to the server, right?
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/699256

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice