Sysclean unable to scan files, need help with log.

hi, i had a problem on my p.c. so i scanned it and nothing was found however
there were some files it was unable to access. I posted on here yesterday and
I was advised to use Trend Micro Sysclean. It was also unable to scan the
files, I'm not computer literate enough to understand the log so I need some
help as to what the problem is. I can't get the log up here so this is some
of what it says:

An error occurred while scanning file
C:\Documents and Settings\NetworkService\NTUSER.DAT - Access is denied

\ntuser.dat.LOG - Access is denied
\LocalSettings\ApplicationData\Microsoft\Windows\UsrClass.dat -Access is
denied \UsrClass.LOG -
Access is denied
C:\Documents and Settings\Owner\NTUSER.DAT - Access is denied
\ntuser.dat.LOG - Access
is denied
..........................

An error was detected on "C: \ System Volume Information\*.*" - Access is
denied
...........................

Could not set file for reading on C:\Windows\Prefetch\...............it
lists a lot of files here
...........................

An error occurred while scanning file
C:\Windows\system32\config\default - Access is denied
\default.LOG - Access is denied
\SAM - Access is denied
\SAM.LOG - Access is denied
\SECURITY - Access is denied
\SECURITY.LOG - Access is denied
\software - Access is denied
\software.LOG - Access is denied
\system - Access is denied
\system.LOG - Access is denied
.......................
If anyone can help please let me know.

charley_n9 wrote:

> hi, i had a problem on my p.c. so i scanned it and nothing was found
> however there were some files it was unable to access. I posted on
> here yesterday and I was advised to use Trend Micro Sysclean. It was
> also unable to scan the files, I'm not computer literate enough to
> understand the log so I need some help as to what the problem is. I
> can't get the log up here so this is some of what it says:
>
> An error occurred while scanning file
> C:\Documents and Settings\NetworkService\NTUSER.DAT - Access is denied
(snip usual error messages about no access to system files)

If you did the Sysclean scan in Safe Mode from an account with
Administrative privileges and nothing was found, then don't worry that
Sysclean didn't have access to System Restore files, etc. This is
normal.

If you then did a scan in Safe Mode from an account with Administrative
privileges with a full-featured current version antivirus (not earlier
than 2004) which has an active subscription and updated definitions and
nothing was found, then your computer is most likely free of viruses.

Since you didn't post to your original thread, I have no idea what the
problems were so can't address that here.

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

thanks for your reply Malke, it's put my mind at rest.
I did the scan as you said. What's been bugging me though is a file called
chandir.dat which I've been led to believe is some kind of file connected to
spyware
http://www.google.co.uk/search?hl=e...andir.dat&meta=
Is this something to be worried about? I'd be grateful if you could let me
know.
"Malke" wrote:

> charley_n9 wrote:
>
> > hi, i had a problem on my p.c. so i scanned it and nothing was found
> > however there were some files it was unable to access. I posted on
> > here yesterday and I was advised to use Trend Micro Sysclean. It was
> > also unable to scan the files, I'm not computer literate enough to
> > understand the log so I need some help as to what the problem is. I
> > can't get the log up here so this is some of what it says:
> >
> > An error occurred while scanning file
> > C:\Documents and Settings\NetworkService\NTUSER.DAT - Access is denied
> (snip usual error messages about no access to system files)
>
> If you did the Sysclean scan in Safe Mode from an account with
> Administrative privileges and nothing was found, then don't worry that
> Sysclean didn't have access to System Restore files, etc. This is
> normal.
>
> If you then did a scan in Safe Mode from an account with Administrative
> privileges with a full-featured current version antivirus (not earlier
> than 2004) which has an active subscription and updated definitions and
> nothing was found, then your computer is most likely free of viruses.
>
> Since you didn't post to your original thread, I have no idea what the
> problems were so can't address that here.
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP Windows - Shell/User
>

charley_n9 wrote:

> thanks for your reply Malke, it's put my mind at rest.
> I did the scan as you said. What's been bugging me though is a file
> called chandir.dat which I've been led to believe is some kind of file
> connected to spyware
> http://www.google.co.uk/search?hl=e...andir.dat&meta=
> Is this something to be worried about? I'd be grateful if you could
> let me know.

http://www.google.com/search?hl=en&...dat&btnG=Search
This Google search shows that "chandir.dat" is a file related to BackWeb
Lite. BackWeb Lite is an updater program usually found in HP computers
(like for WildTangent games) and HP printer software. If this fits your
situation, then BackWeb Lite is not malware. You can disable the
automatic updating of HP software by either looking in the HP software
or by using the System Configuration Utility.

How to Troubleshoot By Using the Msconfig Utility in Windows XP -
http://support.microsoft.com/?id=310560

http://www.google.com/search?hl=en&...ite&btnG=Search

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

I have got a H.P. computer so that clears that up. I was getting confused
with whether BackWeb and BackWeb Lite were the same thing as I was aware that
I had BackWeb but had never come across BackWeb Lite before.
Anyway, thanks for your help it's much appreciated.

"Malke" wrote:

> charley_n9 wrote:
>
> > thanks for your reply Malke, it's put my mind at rest.
> > I did the scan as you said. What's been bugging me though is a file
> > called chandir.dat which I've been led to believe is some kind of file
> > connected to spyware
> > http://www.google.co.uk/search?hl=e...andir.dat&meta=
> > Is this something to be worried about? I'd be grateful if you could
> > let me know.
>
> http://www.google.com/search?hl=en&...dat&btnG=Search
> This Google search shows that "chandir.dat" is a file related to BackWeb
> Lite. BackWeb Lite is an updater program usually found in HP computers
> (like for WildTangent games) and HP printer software. If this fits your
> situation, then BackWeb Lite is not malware. You can disable the
> automatic updating of HP software by either looking in the HP software
> or by using the System Configuration Utility.
>
> How to Troubleshoot By Using the Msconfig Utility in Windows XP -
> http://support.microsoft.com/?id=310560
>
> http://www.google.com/search?hl=en&...ite&btnG=Search
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP Windows - Shell/User
>

charley_n9 wrote:

> I have got a H.P. computer so that clears that up. I was getting
> confused with whether BackWeb and BackWeb Lite were the same thing as
> I was aware that I had BackWeb but had never come across BackWeb Lite
> before. Anyway, thanks for your help it's much appreciated.

You're most welcome.

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

From: "charley_n9" <charleyn9@discussions.microsoft.com>

| hi, i had a problem on my p.c. so i scanned it and nothing was found however
| there were some files it was unable to access. I posted on here yesterday and
| I was advised to use Trend Micro Sysclean. It was also unable to scan the
| files, I'm not computer literate enough to understand the log so I need some
| help as to what the problem is. I can't get the log up here so this is some
| of what it says:
|
| An error occurred while scanning file
| C:\Documents and Settings\NetworkService\NTUSER.DAT - Access is denied
|
| \ntuser.dat.LOG - Access is denied
| \LocalSettings\ApplicationData\Microsoft\Windows\UsrClass.dat -Access is
| denied \UsrClass.LOG -
| Access is denied
| C:\Documents and Settings\Owner\NTUSER.DAT - Access is denied
| \ntuser.dat.LOG - Access
| is denied
| .........................
|
| An error was detected on "C: \ System Volume Information\*.*" - Access is
| denied
| ..........................
|
| Could not set file for reading on C:\Windows\Prefetch\...............it
| lists a lot of files here
| ..........................
|
| An error occurred while scanning file
| C:\Windows\system32\config\default - Access is denied
| \default.LOG - Access is denied
| \SAM - Access is denied
| \SAM.LOG - Access is denied
| \SECURITY - Access is denied
| \SECURITY.LOG - Access is denied
| \software - Access is denied
| \software.LOG - Access is denied
| \system - Access is denied
| \system.LOG - Access is denied
| ......................
| If anyone can help please let me know.

There are anti virus News Groups specifically for this type of discussion.

microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus

Normal operation and it should NOT be construed as a problem.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm