hidr.exe infection

[158notout]

Hi there,

I was recently infected by hidr.exe and srosa.sys. Upon unwittingly running the hidr.exe file (which had been renamed) my whole system was scrambled. All of my folder options changed so that they all had Music or Picture attributes, all of my security programs (Norton Firewall and AV, NOD32) were disabled and the exe's deleted and it placed a couple of keys in the registry. It also disabled all of my services so that device manager etc were unable to find any hardware and the Wireless service didnt start etc. Most of these were fixed by changing the attributes in services.msc from disabled to automatic or manual. However the Security Center still refuses to start. I think it changed the registry keys for this, or deleted one, but I am not sure. Suddenly 10g of space has appeared on my D drive, which I think is connected to the system restore which I suspect has been infected/deleted. I get the Windows cannot start screen when i boot but if i choose "Start Windows Normally" from the two options it procedes fine. Finally it dropped an .mp3 of 1:27 minutes of Bob Dylans 'Just Like A Woman' in my C:\ root directory.

I have deleted the hidr and srosa files and applicable registry keys and the Bob Dylan mp3. I still have the problem that Windows fails to start correctly and that security center cannot start and that system restore seems to be affected as well.

My Kaspersky log shows a few remaining critters, although I am not sure if the cricinfo toolbar can be infected? It was very long so I will post it below.

Here is my HJT:

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 16:55, on 2007-11-25
Platform: Windows Vista (WinNT 6.00.1904)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\GRISOFT\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\acrobat_sl.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\LimeWire\LimeWire.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Users\Allan\AppData\Local\Temp\RtkBtMnt.exe
C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE
C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Windows\System32\mobsync.exe
C:\Users\Allan\Desktop\HiJackThis_v2.exe
C:\Windows\system32\SearchFilterHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.lonesometraveller.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://en.uk.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://en.uk.acer.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://uk.rd.yahoo.com/customize/ycomp/defaults/su/*http://uk.yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: TBSB08360 - {85880F59-485A-474D-9955-915EC345316C} - C:\PROGRA~1\CRICIN~1\cricinfo.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [NeroCheck] C:\Windows\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Acrobat Synchronizer.lnk = C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIC273~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/pr02/resources/VistaMSNPUplden-gb.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: eNetHook.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: eDataSecurity Service - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Unknown owner - C:\Program Files\Norton Internet Security\isPwdSvc.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Unknown owner - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE (file missing)
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe (file missing)
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 14331 bytes

Anyone got any advice? Or am I looking at a full wipe and re-install?

Cheers,

Allan

[158notout]

Sunday, November 25, 2007 4:00:54 PM
Operating System: Microsoft Windows Vista Home Edition, (Build 6000)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 25/11/2007
Kaspersky Anti-Virus database records: 465354
Scan Settings
Scan using the following antivirus database extended
Scan Archives true
Scan Mail Bases true
Scan Target My Computer
C:\
D:\
E:\
Scan Statistics
Total number of scanned objects 185418
Number of viruses found 5
Number of infected objects 10
Number of suspicious objects 0
Duration of the scan process 03:36:05

Infected Object Name Virus Name Last Action
C:\Boot\BCD Object is locked skipped
C:\Boot\BCD.LOG Object is locked skipped
C:\Program Files\Adobe\Adobe Device Central CS3\AMT\AUMProduct.cer Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\EENGINE\EPERSIST.DAT Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\NFWEVT.LOG Object is locked skipped
C:\Program Files\Cricinfo Toolbar\tbhelper.dll Infected: not-a-virus:AdWare.Win32.Mostofate.ab skipped
C:\Program Files\eMule\emule.exe -AutoStart Infected: Trojan-Downloader.Win32.Bagle.fu skipped
C:\Program Files\eMule\Temp\058.part/4Musics Multiformat Converter 4.4.exe Infected: Trojan-Downloader.Win32.Bagle.fx skipped
C:\Program Files\eMule\Temp\058.part ZIP: infected - 1 skipped
C:\Program Files\ESET\cache\CACHE.NDB Object is locked skipped
C:\Program Files\ESET\infected\NGICGGCA.NQF Infected: Trojan-Clicker.Win32.Agent.kn skipped
C:\Program Files\ESET\logs\virlog.dat Object is locked skipped
C:\Program Files\ESET\logs\warnlog.dat Object is locked skipped
C:\Program Files\InstallShield Installation Information\{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}\Setup.ilg Object is locked skipped
C:\Program Files\InstallShield Installation Information\{B145EC69-66F5-11D8-9D75-000129760D75}\setup.ilg Object is locked skipped
C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\setup.ilg Object is locked skipped
C:\Program Files\InstallShield Installation Information\{B804C424-B66D-447A-84BD-C6B88C392C3A}\setup.ilg Object is locked skipped
C:\Program Files\InstallShield Installation Information\{EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37}\setup.ilg Object is locked skipped
C:\Program Files\InstallShield Installation Information\{F79A208D-D929-11D9-9D77-000129760D75}\setup.ilg Object is locked skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\AVApp.log Object is locked skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\AVError.log Object is locked skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\AVVirus.log Object is locked skipped
C:\ProgramData\Symantec\Common Client\settings.bak Object is locked skipped
C:\ProgramData\Symantec\Common Client\settings.dat Object is locked skipped
C:\ProgramData\Symantec\LiveUpdate\2007-11-25_Log.ALUSchedulerSvc.LiveUpdate Object is locked skipped
C:\ProgramData\Symantec\SPBBC\BBConfig.log Object is locked skipped
C:\ProgramData\Symantec\SPBBC\BBDebug.log Object is locked skipped
C:\ProgramData\Symantec\SPBBC\BBDetect.log Object is locked skipped
C:\ProgramData\Symantec\SPBBC\BBNotify.log Object is locked skipped
C:\ProgramData\Symantec\SPBBC\BBRefr.log Object is locked skipped
C:\ProgramData\Symantec\SPBBC\BBSetCfg.log Object is locked skipped
C:\ProgramData\Symantec\SPBBC\BBSetCfg2.log Object is locked skipped
C:\ProgramData\Symantec\SPBBC\BBSetDev.log Object is locked skipped
C:\ProgramData\Symantec\SPBBC\BBSetLoc.log Object is locked skipped
C:\ProgramData\Symantec\SPBBC\BBSetUsr.log Object is locked skipped
C:\ProgramData\Symantec\SPBBC\BBStHash.log Object is locked skipped
C:\ProgramData\Symantec\SPBBC\BBValid.log Object is locked skipped
C:\ProgramData\Symantec\SPBBC\SPPolicy.log Object is locked skipped
C:\ProgramData\Symantec\SPBBC\SPStart.log Object is locked skipped
C:\ProgramData\Symantec\SPBBC\SPStop.log Object is locked skipped
C:\ProgramData\Symantec\SRTSP\SrtErEvt.log Object is locked skipped
C:\ProgramData\Symantec\SRTSP\SrtMoEvt.log Object is locked skipped
C:\ProgramData\Symantec\SRTSP\SrtNvEvt.log Object is locked skipped
C:\ProgramData\Symantec\SRTSP\SrtScEvt.log Object is locked skipped
C:\ProgramData\Symantec\SRTSP\SrtTxFEvt.log Object is locked skipped
C:\ProgramData\Symantec\SRTSP\SrtViEvt.log Object is locked skipped
C:\ProgramData\Symantec\SubEng\submissions.idx Object is locked skipped
C:\ProgramData\Symantec\SymNetDrv\SNDALRT.log Object is locked skipped
C:\ProgramData\Symantec\SymNetDrv\SNDCON.log Object is locked skipped
C:\ProgramData\Symantec\SymNetDrv\SNDDBG.log Object is locked skipped
C:\ProgramData\Symantec\SymNetDrv\SNDFW.log Object is locked skipped
C:\ProgramData\Symantec\SymNetDrv\SNDIDS.log Object is locked skipped
C:\ProgramData\Symantec\SymNetDrv\SNDSYS.log Object is locked skipped
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7b6648db1a8e0b47f3909e331c543726_7b2cba51-9c2c-4b47-be76-03bc0cc8b99c Object is locked skipped
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ca2e4766884465d9fd68e05e809b33ac_7b2cba51-9c2c-4b47-be76-03bc0cc8b99c Object is locked skipped
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\dcef218e58603cd440a575a0fb8e1c05_7b2cba51-9c2c-4b47-be76-03bc0cc8b99c Object is locked skipped
C:\ProgramData\Microsoft\User Account Pictures\Monika.dat Object is locked skipped
C:\Users\Allan\AppData\Roaming\microsoft\Windows\Cookies\index.dat Object is locked skipped
C:\Users\Allan\AppData\Roaming\microsoft\Windows\Cookies\Low\index.dat Object is locked skipped
C:\Users\Allan\AppData\Roaming\Mozilla\Firefox\Profiles\y7hi9n0a.default\cert8.db Object is locked skipped
C:\Users\Allan\AppData\Roaming\Mozilla\Firefox\Profiles\y7hi9n0a.default\formhistory.dat Object is locked skipped
C:\Users\Allan\AppData\Roaming\Mozilla\Firefox\Profiles\y7hi9n0a.default\history.dat Object is locked skipped
C:\Users\Allan\AppData\Roaming\Mozilla\Firefox\Profiles\y7hi9n0a.default\key3.db Object is locked skipped
C:\Users\Allan\AppData\Roaming\Mozilla\Firefox\Profiles\y7hi9n0a.default\parent.lock Object is locked skipped
C:\Users\Allan\AppData\Roaming\Mozilla\Firefox\Profiles\y7hi9n0a.default\search.sqlite Object is locked skipped
C:\Users\Allan\AppData\Roaming\Mozilla\Firefox\Profiles\y7hi9n0a.default\urlclassifier2.sqlite Object is locked skipped
C:\Users\Allan\AppData\Local\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Users\Allan\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT Object is locked skipped
C:\Users\Allan\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1024.db Object is locked skipped
C:\Users\Allan\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db Object is locked skipped
C:\Users\Allan\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db Object is locked skipped
C:\Users\Allan\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db Object is locked skipped
C:\Users\Allan\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db Object is locked skipped
C:\Users\Allan\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db Object is locked skipped
C:\Users\Allan\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat Object is locked skipped
C:\Users\Allan\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012007112520071126\index.dat Object is locked skipped
C:\Users\Allan\AppData\Local\Microsoft\Windows\History\Low\History.IE5\index.dat Object is locked skipped
C:\Users\Allan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Users\Allan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Users\Allan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\index.dat Object is locked skipped
C:\Users\Allan\AppData\Local\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Users\Allan\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1 Object is locked skipped
C:\Users\Allan\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2 Object is locked skipped
C:\Users\Allan\AppData\Local\Microsoft\Windows\UsrClass.dat{f2d3c1a3-611f-11dc-b9f3-0016d35a5b7b}.TM.blf Object is locked skipped
C:\Users\Allan\AppData\Local\Microsoft\Windows\UsrClass.dat{f2d3c1a3-611f-11dc-b9f3-0016d35a5b7b}.TMContainer00000000000000000001.regtrans-ms Object is locked skipped
C:\Users\Allan\AppData\Local\Microsoft\Windows\UsrClass.dat{f2d3c1a3-611f-11dc-b9f3-0016d35a5b7b}.TMContainer00000000000000000002.regtrans-ms Object is locked skipped
C:\Users\Allan\AppData\Local\Microsoft\Windows Sidebar\Settings.ini Object is locked skipped
C:\Users\Allan\AppData\Local\Mozilla\Firefox\Profiles\y7hi9n0a.default\Cache\_CACHE_001_ Object is locked skipped
C:\Users\Allan\AppData\Local\Mozilla\Firefox\Profiles\y7hi9n0a.default\Cache\_CACHE_002_ Object is locked skipped
C:\Users\Allan\AppData\Local\Mozilla\Firefox\Profiles\y7hi9n0a.default\Cache\_CACHE_003_ Object is locked skipped
C:\Users\Allan\AppData\Local\Mozilla\Firefox\Profiles\y7hi9n0a.default\Cache\_CACHE_MAP_ Object is locked skipped
C:\Users\Allan\AppData\Local\Temp\IMG7ED0.tmp Object is locked skipped
C:\Users\Allan\Downloads\Programs and Files\install_cricinfo_toolbar_uk.exe/stream/data0024 Infected: not-a-virus:AdWare.Win32.Mostofate.ab skipped
C:\Users\Allan\Downloads\Programs and Files\install_cricinfo_toolbar_uk.exe/stream Infected: not-a-virus:AdWare.Win32.Mostofate.ab skipped
C:\Users\Allan\Downloads\Programs and Files\install_cricinfo_toolbar_uk.exe NSIS: infected - 2 skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 1\01 - The Animals - House Of The Rising Sun.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 1\02 - Tommy James and the Shondells - Mony Mony.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 1\03 - Small Faces - Itchycoo Park.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 1\04 - Bonzo Dog Doo-Dah Band - I'm The Urban Spaceman.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 1\05 - Cher - Sunny.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 1\06 - Curtis Mayfield - We Got To Have Peace.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 1\07 - Zombies - Time of the Season.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 1\08 - Classics IV - Spooky.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 1\09 - Moody Blues - Go Now.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 1\10 - Groundhogs - Garden.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 1\11 - Blue Mink - Good Morning Freedom.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 1\12 - Herman's Hermits - No Milk Today.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 1\13 - Peter Sarstedt - Where Did You Go To My Lovely.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 1\14 - Turtles - Elenore.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 1\15 - Don McLean - American Pie.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 1\Good Morning VietNam 1.bmp Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 1\good_morning_vietnam_-_cd1-2_ab1.jpg Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 1\good_morning_vietnam_-_cd1-2_ab2.jpg Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 2\01 - Jeff Beck - Hi Ho silver Lining.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 2\02 - Blue Mink - The Bannerman.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 2\03 - Zombies - She's Not There.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 2\04 - Humble Pie - Natrual Born Boogie.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 2\05 - Cher - Hey Joe.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 2\06 - Bubble Puppy - Hot Smoke & Sasafrass.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 2\07 - Canned Heat - Goin' Up The Country.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 2\08 - Amen Corner - (If Paradise Is) Half as Nice.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 2\09 - Manfrd Mann - I'm Your Hoochie Coochie Man.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 2\10 - Tommy James And The Shondells - Hanky Panky.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 2\11 - Bobby Fuller Four - I Fought The Law.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 2\12 - Small Faces - Tin Soldier.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 2\13 - 10 CC - Rubber Bullets.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 2\14 - Joe Tex - I Belive I'm Gonna Make It.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 2\15 - Timmy Thoms - Why Can't We Live Together.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 2\Good Morning VietNam 2.bmp Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 3\01 - The Animals - We gotta get out of this place - 1965.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 3\02 - Nasville Teens - Tobacco road - 1964.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 3\03 - The Yardbirds - Four your love - 1965.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 3\04 - The Flowerpot Men - Let's go to San Francisco - 1967.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 3\05 - Paramounts - Poison ivy - 1963.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 3\06 - The Hollies - Blowin' in the wind - 1969.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 3\07 - America - Nice - 1968.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 3\08 - The McCoys - Hang on sloopy - 1965.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 3\09 - Chris Farlowe - Out of time - 1966.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 3\10 - Honeybus - I can't let magic go - 1968.mp3 Object is locked skipped

[158notout]

C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 3\11 - Chris Andrews - Yesterday man - 1965.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 3\12 - B. J. Thomas - Hooked on a feeling - 1968.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 3\13 - Jimmy Cliff - Vietnam - 1970.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 3\14 - Impressions - Choice of colours - 1969.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 3\15 - Deep Purple - Child in time - 1970.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 3\Good Morning VietNam 3.bmp Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 3\good_morning_vietnam_-_cd3-5_ab3.jpg Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 3\good_morning_vietnam_-_cd3-5_ab4.jpg Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 3\good_morning_vietnam_-_cd3-5_ab5.jpg Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 4\01 - The Band - Rag Mama Rag.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 4\02 - The Budys - Give up your Guns.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 4\03 - Joe South - Games People Play.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 4\04 - Canned Heat - On the road again.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 4\05 - Herman's Hermits - There's a kind of hush.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 4\06 - Peter & Gordon - I go to peaces.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 4\07 - Zombies - Sommertime.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 4\08 - Blue Mink - Melting Pot.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 4\09 - Deep Purple - Black Night.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 4\10 - Jim Croce - Time in a bottle.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 4\11 - The Budys - Timothy.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 4\12 - The Turtles - Happy Together.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 4\13 - Bobby Womack - Harry Hippie.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 4\14 - The Family Dogg - Brown Eyed Girl.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 4\15 - Melanie - Lay down (candles in the rain) (unplugged).mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 4\Good Morning VietNam 4.bmp Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 5\01 - Jackie De Shannon - What the world needs now is love - 1965.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 5\02 - Norman Greenbaum - Spirit in the sky - 1970.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 5\03 - Canned Heat - Let's work together - 1970.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 5\04 - Jimmy Cliff - Wonderful world, beautyful people - 1969.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 5\05 - Cher - Bang Bang (My baby shot me down) - 1966.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 5\06 - Fleetwood Mac - Man of the world - 1969.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 5\07 - Nitty Gritty Dirt Band - Both sides now - 1972.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 5\08 - The Turtles - She'd rather be with me - 1967.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 5\09 - Joe Tex - When Johnny comes marching home - 1968.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 5\10 - Timmy Thomas - People are changin' - 1973.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 5\11 - David & Jonathan - Michelle - 1966.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 5\12 - The Herd - From the underworld - 1967.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 5\13 - Steve Rowland & The Family Dogg - Sympathy - 1970.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 5\14 - Tommy James & the Shondells - Crimson and clover - 1969.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 5\15 - Funcadelic - Maggot Brain - 1978.mp3 Object is locked skipped
C:\Users\Allan\Incomplete\H3OHQ3X3EIE3VQRLELLML3K6F5KYBQY3\Good Morning Viet-Nam-Cd 1-5-knaverlisa\Good Morning Viet-Nam-CD 5\Good Morning VietNam 5.bmp Object is locked skipped
C:\Users\Allan\NTUSER.DAT Object is locked skipped
C:\Users\Allan\ntuser.dat.LOG1 Object is locked skipped
C:\Users\Allan\ntuser.dat.LOG2 Object is locked skipped
C:\Users\Allan\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf Object is locked skipped
C:\Users\Allan\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms Object is locked skipped
C:\Users\Allan\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000002.regtrans-ms Object is locked skipped
C:\Windows\Debug\PASSWD.LOG Object is locked skipped
C:\Windows\Debug\sam.log Object is locked skipped
C:\Windows\Debug\WIA\wiatrace.log Object is locked skipped
C:\Windows\Logs\CBS\CBS.log Object is locked skipped
C:\Windows\Logs\CBS\CBS.persist.log Object is locked skipped
C:\Windows\Logs\DPX\setupact.log Object is locked skipped
C:\Windows\Logs\DPX\setuperr.log Object is locked skipped
C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe.config Object is locked skipped
C:\Windows\Panther\UnattendGC\diagerr.xml Object is locked skipped
C:\Windows\Panther\UnattendGC\diagwrn.xml Object is locked skipped
C:\Windows\Panther\UnattendGC\setupact.log Object is locked skipped
C:\Windows\Panther\UnattendGC\setuperr.log Object is locked skipped
C:\Windows\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{0AB43CDA-4A46-455B-A15D-08C6634C94DF}.crmlog Object is locked skipped
C:\Windows\security\database\secedit.sdb Object is locked skipped
C:\Windows\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 Object is locked skipped
C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 Object is locked skipped
C:\Windows\System32\catroot2\edb.log Object is locked skipped
C:\Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb Object is locked skipped
C:\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb Object is locked skipped
C:\Windows\System32\config\COMPONENTS Object is locked skipped
C:\Windows\System32\config\COMPONENTS.LOG1 Object is locked skipped
C:\Windows\System32\config\COMPONENTS.LOG2 Object is locked skipped
C:\Windows\System32\config\DEFAULT Object is locked skipped
C:\Windows\System32\config\DEFAULT.LOG1 Object is locked skipped
C:\Windows\System32\config\DEFAULT.LOG2 Object is locked skipped
C:\Windows\System32\config\RegBack\COMPONENTS Object is locked skipped
C:\Windows\System32\config\RegBack\DEFAULT Object is locked skipped
C:\Windows\System32\config\RegBack\SAM Object is locked skipped
C:\Windows\System32\config\RegBack\SECURITY Object is locked skipped
C:\Windows\System32\config\RegBack\SOFTWARE Object is locked skipped
C:\Windows\System32\config\RegBack\SYSTEM Object is locked skipped
C:\Windows\System32\config\SAM Object is locked skipped
C:\Windows\System32\config\SAM.LOG1 Object is locked skipped
C:\Windows\System32\config\SAM.LOG2 Object is locked skipped
C:\Windows\System32\config\SECURITY Object is locked skipped
C:\Windows\System32\config\SECURITY.LOG1 Object is locked skipped
C:\Windows\System32\config\SECURITY.LOG2 Object is locked skipped
C:\Windows\System32\config\SOFTWARE Object is locked skipped
C:\Windows\System32\config\SOFTWARE.LOG1 Object is locked skipped
C:\Windows\System32\config\SOFTWARE.LOG2 Object is locked skipped
C:\Windows\System32\config\SYSTEM Object is locked skipped
C:\Windows\System32\config\SYSTEM.LOG1 Object is locked skipped
C:\Windows\System32\config\SYSTEM.LOG2 Object is locked skipped
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog00.sqm Object is locked skipped
C:\Windows\System32\config\TxR\{250834b7-750c-494d-bdc3-da86b6e2101a}.TxR.0.regtrans-ms Object is locked skipped
C:\Windows\System32\config\TxR\{250834b7-750c-494d-bdc3-da86b6e2101a}.TxR.1.regtrans-ms Object is locked skipped
C:\Windows\System32\config\TxR\{250834b7-750c-494d-bdc3-da86b6e2101a}.TxR.2.regtrans-ms Object is locked skipped
C:\Windows\System32\config\TxR\{250834b7-750c-494d-bdc3-da86b6e2101a}.TxR.blf Object is locked skipped
C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TM.blf Object is locked skipped
C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TMContainer00000000000000000001.regtrans-ms Object is locked skipped
C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TMContainer00000000000000000002.regtrans-ms Object is locked skipped
C:\Windows\System32\LogFiles\IN0711.log Object is locked skipped
C:\Windows\System32\LogFiles\Scm\SCM.EVM Object is locked skipped
C:\Windows\System32\LogFiles\WUDF\WUDFTrace.etl Object is locked skipped
C:\Windows\System32\netsecurity.dll Infected: Backdoor.Win32.SdBot.bnj skipped
C:\Windows\System32\netsecurity.exe Infected: Backdoor.Win32.SdBot.bnj skipped
C:\Windows\System32\restore\MachineGuid.txt Object is locked skipped
C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAT Object is locked skipped
C:\Windows\System32\SMI\Store\Machine\schema.dat.LOG1 Object is locked skipped
C:\Windows\System32\SMI\Store\Machine\schema.dat.LOG2 Object is locked skipped
C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAT{3a53986d-6a70-11db-887c-d362bd253390}.TM.blf Object is locked skipped
C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAT{3a53986d-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms Object is locked skipped
C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAT{3a53986d-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000002.regtrans-ms Object is locked skipped
C:\Windows\System32\spool\SpoolerETW.etl Object is locked skipped
C:\Windows\System32\sysprep\Panther\diagerr.xml Object is locked skipped
C:\Windows\System32\sysprep\Panther\diagwrn.xml Object is locked skipped
C:\Windows\System32\sysprep\Panther\setupact.log Object is locked skipped
C:\Windows\System32\sysprep\Panther\setuperr.log Object is locked skipped
C:\Windows\System32\Tasks\Microsoft\Windows\CertificateServicesClient\SystemTask Object is locked skipped
C:\Windows\System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries Object is locked skipped
C:\Windows\System32\Tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask Object is locked skipped
C:\Windows\System32\wbem\AutoRecover\3460B7617E0429A960E481B197F238A3.mof Object is locked skipped
C:\Windows\System32\wbem\AutoRecover\E478A5DB75C9721E744C05D78DBACFD3.mof Object is locked skipped
C:\Windows\System32\wbem\Logs\WMITracing.log Object is locked skipped
C:\Windows\System32\wbem\Repository\INDEX.BTR Object is locked skipped
C:\Windows\System32\wbem\Repository\MAPPING1.MAP Object is locked skipped
C:\Windows\System32\wbem\Repository\MAPPING2.MAP Object is locked skipped
C:\Windows\System32\wbem\Repository\OBJECTS.DATA Object is locked skipped
C:\Windows\System32\winevt\Logs\Application.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\DFS Replication.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\HardwareEvents.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Internet Explorer.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Key Management Service.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Media Center.evtx Object is locked skipped

[158notout]

C:\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-CorruptedFileRecovery-Client%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-CorruptedFileRecovery-Server%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-DateTimeControlPanel%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-MSDT%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-PLA%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Networking%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-DiskDiagnostic%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-DiskDiagnosticDataCollector%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-DiskDiagnosticResolver%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-DriverFrameworks-UserMode%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Forwarding%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Help%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-International%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WDI%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-LanguagePackSetup%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-MeetingSpace%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-MemoryDiagnostics-Results%4Debug.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-MUI%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkAccessProtection%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-ParentalControls%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Program-Compatibility-Assistant%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-ReliabilityAnalysisComponent%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteAssistance%4Admin.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteAssistance%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Resolver%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Leak-Diagnostic%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-RestartManager%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-TaskScheduler%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-UAC%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-UAC-FileVirtualization%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-WindowsUpdateClient%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Winlogon%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Winsock-WS2HELP%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Wired-AutoConfig%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Microsoft-Windows-WLAN-AutoConfig%4Operational.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\ODiag.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\OSession.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Security.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\Setup.evtx Object is locked skipped
C:\Windows\System32\winevt\Logs\System.evtx Object is locked skipped
C:\Windows\Tasks\SCHEDLGU.TXT Object is locked skipped
C:\Windows\winsxs\x86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6000.16386_none_cef7ceb03914a67f\dnary.xsd Object is locked skipped
Scan process completed.

Sorry, I know it says only two pages for kaspersky but i miscounted my characters.

Cheers,
allan