Locked Objects

[sasha gottfried]

Never saw this before: I did a Kapesrsky on-line scan of critical objects.
It didn't find any problems but it did find all these "locked objects." What
are these all about? Should they be locked?

Here is the report:

KASPERSKY ONLINE SCANNER REPORT
Friday, June 30, 2006 9:23:00 AM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build
2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 30/06/2006
Kaspersky Anti-Virus database records: 191640
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true

Scan Target - Critical Areas:
C:\WINDOWS
C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\

Scan Statistics:
Total number of scanned objects: 26117
Number of viruses found: 0
Number of infected objects: 0 / 0
Number of suspicious objects: 0
Duration of the scan process: 00:17:00

Infected Object Name / Virus Name / Last Action
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{430598CF-B765-4244-8906-3228DB64588F}.crmlog
Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Media Ce.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\~DF7F21.tmp Object is locked skipped

Scan process completed.

 

[Art]

Never saw this before: I did a Kapesrsky on-line scan of critical objects.
It didn't find any problems but it did find all these "locked objects." What
are these all about? Should they be locked?

Yes, that's Windows doing that. Scanning in Safe mode will cut down on
on the problem of not being able to scan all files, and it may keep
sme malware some from running as well. The best way to scan is with
the use of a alternate operating system so that files aren't locked
and malware can't run.

Art
http://home.epix.net/~artnpeg

 

[Poster 60]

I find it strange since NAV2006 doesn't show them locked.

How about NOD32 does it show them locked?

 

[Art]

I find it strange since NAV2006 doesn't show them locked.

How about NOD32 does it show them locked?

You tell me. I don't use NOD32. The various vendors may or may not
issue that particular message.

Art
http://home.epix.net/~artnpeg