trojans bispy.a and bispy.b

H

hilary

can anybody help me with this: when I run Ad-Aware SE an AVG window pops
up to say my computer's infected with bispy.a and bispy.b. Generally,
when i look in their purported locations, there's nothing there. AVG and
ad-aware are up to date. I've also run spy sweeper and some other spy
seekers, which don't find it. I ran HijackThis, with these results:

Logfile of HijackThis v1.97.7
Scan saved at 2:27:41 PM, on 10/11/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\System32\wuauclt.exe
C:\PROGRA~1\Grisoft\AVG6\AVGCC32.EXE
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\hilary\Desktop\download\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.mozilla.org/start
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.mozilla.org/start
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} -
C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -
C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE
C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [AdaptecDirectCD] C:\Program Files\Roxio\Easy CD
Creator 5\DirectCD\DirectCD.exe
O4 - HKLM\..\Run: [USSShReg]
C:\PROGRA~1\ULEADS~1\ULEADP~1.2\SSaver\Ussshreg.exe /r
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft
Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program
Files\Microsoft Works\WkDetect.exe
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program
Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone
Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy
Sweeper\SpySweeper.exe" /0
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common
Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
Office\Office\OSA9.EXE
O8 - Extra context menu item: &Define - C:\Program Files\Common
Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O8 - Extra context menu item: Look Up in &Encyclopedia - C:\Program
Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: Encarta Encyclopedia (HKLM)
O9 - Extra 'Tools' menuitem: Encarta Encyclopedia (HKLM)
O9 - Extra button: Define (HKLM)
O9 - Extra 'Tools' menuitem: Define (HKLM)
O12 - Plugin for .mp3: C:\Program Files\Internet
Explorer\PLUGINS\npqtplugin3.dll
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus
scanner) -
http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI
Utility Class) -
http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) -
file://C:\Program Files\Autodesk Architectural Desktop 3\AcDcToday.ocx
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) -
file://C:\Program Files\Autodesk Architectural Desktop 3\InstBanr.ocx
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) -
file://C:\Program Files\Autodesk Architectural Desktop 3\InstFred.ocx
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash
Object) -
http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) -
file://C:\Program Files\Autodesk Architectural Desktop 3\AcPreview.ocx


thanks
 
D

David H. Lipman

1) Download the following two items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download sysclean.com and place it in that directory.
Dowload the signature files (pattern files) by obtaining the ZIP file.
For example; lpt194.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
3) Reboot your PC into Safe Mode
4) Using the Trend Sysclean utility, perform a Full Scan of your platform and
clean/delete any infectors found
5) Restart your PC and perform a "final" Full Scan of your platform
6) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
7) Reboot your PC.
8) If you are using WinME or WinXP, create a new Restore point
9) Please report back your results

Dave




| can anybody help me with this: when I run Ad-Aware SE an AVG window pops
| up to say my computer's infected with bispy.a and bispy.b. Generally,
| when i look in their purported locations, there's nothing there. AVG and
| ad-aware are up to date. I've also run spy sweeper and some other spy
| seekers, which don't find it. I ran HijackThis, with these results:
|
| Logfile of HijackThis v1.97.7
| Scan saved at 2:27:41 PM, on 10/11/2004
| Platform: Windows XP SP1 (WinNT 5.01.2600)
| MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
|
| Running processes:
| C:\WINDOWS\System32\smss.exe
| C:\WINDOWS\system32\csrss.exe
| C:\WINDOWS\system32\winlogon.exe
| C:\WINDOWS\system32\services.exe
| C:\WINDOWS\system32\lsass.exe
| C:\WINDOWS\system32\svchost.exe
| C:\WINDOWS\System32\svchost.exe
| C:\WINDOWS\System32\svchost.exe
| C:\WINDOWS\System32\svchost.exe
| C:\WINDOWS\system32\spoolsv.exe
| C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
| C:\WINDOWS\System32\nvsvc32.exe
| C:\WINDOWS\System32\tcpsvcs.exe
| C:\WINDOWS\System32\snmp.exe
| C:\WINDOWS\System32\wdfmgr.exe
| C:\WINDOWS\system32\ZoneLabs\vsmon.exe
| C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
| C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
| C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
| C:\WINDOWS\System32\wuauclt.exe
| C:\PROGRA~1\Grisoft\AVG6\AVGCC32.EXE
| C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
| C:\WINDOWS\explorer.exe
| C:\Documents and Settings\hilary\Desktop\download\HijackThis.exe
|
| R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
| http://www.mozilla.org/start
| R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
| http://www.mozilla.org/start
| O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
| C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
| O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} -
| C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
| O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -
| C:\WINDOWS\System32\msdxm.ocx
| O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE
| C:\WINDOWS\System32\NvCpl.dll,NvStartup
| O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
| O4 - HKLM\..\Run: [AdaptecDirectCD] C:\Program Files\Roxio\Easy CD
| Creator 5\DirectCD\DirectCD.exe
| O4 - HKLM\..\Run: [USSShReg]
| C:\PROGRA~1\ULEADS~1\ULEADP~1.2\SSaver\Ussshreg.exe /r
| O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
| O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft
| Works\WksSb.exe /AllUsers
| O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program
| Files\Microsoft Works\WkDetect.exe
| O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP
| O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program
| Files\Java\j2re1.4.2_05\bin\jusched.exe
| O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone
| Labs\ZoneAlarm\zlclient.exe"
| O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy
| Sweeper\SpySweeper.exe" /0
| O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common
| Files\Adobe\Calibration\Adobe Gamma Loader.exe
| O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
| Office\Office\OSA9.EXE
| O8 - Extra context menu item: &Define - C:\Program Files\Common
| Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
| O8 - Extra context menu item: Look Up in &Encyclopedia - C:\Program
| Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
| O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
| O9 - Extra button: Encarta Encyclopedia (HKLM)
| O9 - Extra 'Tools' menuitem: Encarta Encyclopedia (HKLM)
| O9 - Extra button: Define (HKLM)
| O9 - Extra 'Tools' menuitem: Define (HKLM)
| O12 - Plugin for .mp3: C:\Program Files\Internet
| Explorer\PLUGINS\npqtplugin3.dll
| O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus
| scanner) -
| http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
| O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI
| Utility Class) -
| http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
| O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) -
| file://C:\Program Files\Autodesk Architectural Desktop 3\AcDcToday.ocx
| O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) -
| file://C:\Program Files\Autodesk Architectural Desktop 3\InstBanr.ocx
| O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) -
| file://C:\Program Files\Autodesk Architectural Desktop 3\InstFred.ocx
| O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash
| Object) -
| http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
| O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) -
| file://C:\Program Files\Autodesk Architectural Desktop 3\AcPreview.ocx
|
|
| thanks
 
H

hilary

thanks for your help. sadly, the problem doesn't seem to be fixed. The
first safe mode full scan turned up nothing, but when running the second
full scan, I go an AVG window saying it had found bispy.a (as usual, in
a folder that doesn't seem to exist, in spite of the fact i have
explorer set to show hidden files). Ran sysclean again, same result,
which each time has been that it finds no viruses, cleans no viruses,
has access denied to countless prefetch subfolders and several system 32
folders, as well as a few others (log is attached).
It seems possible that sysclean is finding it briefly, which alerts avg,
but then the bispy migrates. don't get why it doesn't register with
sysclean's log though. all that denied access is making me suspicious,
though.
thanks,
hilary




1) Download the following two items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download sysclean.com and place it in that directory.
Dowload the signature files (pattern files) by obtaining the ZIP file.
For example; lpt194.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
3) Reboot your PC into Safe Mode
4) Using the Trend Sysclean utility, perform a Full Scan of your platform and
clean/delete any infectors found
5) Restart your PC and perform a "final" Full Scan of your platform
6) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
7) Reboot your PC.
8) If you are using WinME or WinXP, create a new Restore point
9) Please report back your results

Dave




| can anybody help me with this: when I run Ad-Aware SE an AVG window pops
| up to say my computer's infected with bispy.a and bispy.b. Generally,
| when i look in their purported locations, there's nothing there. AVG and
| ad-aware are up to date. I've also run spy sweeper and some other spy
| seekers, which don't find it. I ran HijackThis, with these results:
|
| Logfile of HijackThis v1.97.7
| Scan saved at 2:27:41 PM, on 10/11/2004
| Platform: Windows XP SP1 (WinNT 5.01.2600)
| MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
|
| Running processes:
| C:\WINDOWS\System32\smss.exe
| C:\WINDOWS\system32\csrss.exe
| C:\WINDOWS\system32\winlogon.exe
| C:\WINDOWS\system32\services.exe
| C:\WINDOWS\system32\lsass.exe
| C:\WINDOWS\system32\svchost.exe
| C:\WINDOWS\System32\svchost.exe
| C:\WINDOWS\System32\svchost.exe
| C:\WINDOWS\System32\svchost.exe
| C:\WINDOWS\system32\spoolsv.exe
| C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
| C:\WINDOWS\System32\nvsvc32.exe
| C:\WINDOWS\System32\tcpsvcs.exe
| C:\WINDOWS\System32\snmp.exe
| C:\WINDOWS\System32\wdfmgr.exe
| C:\WINDOWS\system32\ZoneLabs\vsmon.exe
| C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
| C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
| C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
| C:\WINDOWS\System32\wuauclt.exe
| C:\PROGRA~1\Grisoft\AVG6\AVGCC32.EXE
| C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
| C:\WINDOWS\explorer.exe
| C:\Documents and Settings\hilary\Desktop\download\HijackThis.exe
|
| R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
| http://www.mozilla.org/start
| R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
| http://www.mozilla.org/start
| O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
| C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
| O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} -
| C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
| O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -
| C:\WINDOWS\System32\msdxm.ocx
| O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE
| C:\WINDOWS\System32\NvCpl.dll,NvStartup
| O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
| O4 - HKLM\..\Run: [AdaptecDirectCD] C:\Program Files\Roxio\Easy CD
| Creator 5\DirectCD\DirectCD.exe
| O4 - HKLM\..\Run: [USSShReg]
| C:\PROGRA~1\ULEADS~1\ULEADP~1.2\SSaver\Ussshreg.exe /r
| O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
| O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft
| Works\WksSb.exe /AllUsers
| O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program
| Files\Microsoft Works\WkDetect.exe
| O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP
| O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program
| Files\Java\j2re1.4.2_05\bin\jusched.exe
| O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone
| Labs\ZoneAlarm\zlclient.exe"
| O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy
| Sweeper\SpySweeper.exe" /0
| O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common
| Files\Adobe\Calibration\Adobe Gamma Loader.exe
| O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
| Office\Office\OSA9.EXE
| O8 - Extra context menu item: &Define - C:\Program Files\Common
| Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
| O8 - Extra context menu item: Look Up in &Encyclopedia - C:\Program
| Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
| O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
| O9 - Extra button: Encarta Encyclopedia (HKLM)
| O9 - Extra 'Tools' menuitem: Encarta Encyclopedia (HKLM)
| O9 - Extra button: Define (HKLM)
| O9 - Extra 'Tools' menuitem: Define (HKLM)
| O12 - Plugin for .mp3: C:\Program Files\Internet
| Explorer\PLUGINS\npqtplugin3.dll
| O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus
| scanner) -
| http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
| O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI
| Utility Class) -
| http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
| O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) -
| file://C:\Program Files\Autodesk Architectural Desktop 3\AcDcToday.ocx
| O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) -
| file://C:\Program Files\Autodesk Architectural Desktop 3\InstBanr.ocx
| O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) -
| file://C:\Program Files\Autodesk Architectural Desktop 3\InstFred.ocx
| O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash
| Object) -
| http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
| O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) -
| file://C:\Program Files\Autodesk Architectural Desktop 3\AcPreview.ocx
|
|
| thanks




/--------------------------------------------------------------\
| Trend Micro Sysclean Package |
| Copyright 2002, Trend Micro, Inc. |
| http://www.trendmicro.com |
\--------------------------------------------------------------/


2004-10-11, 15:38:19, Auto-clean mode specified.
2004-10-11, 15:38:19, Running scanner "C:\Documents and Settings\hilary\Desktop\New Folder\TSC.BIN"...
2004-10-11, 15:39:44, Scanner "C:\Documents and Settings\hilary\Desktop\New Folder\TSC.BIN" has finished running.
2004-10-11, 15:39:44, TSC Log:

Damage Cleanup Engine (DCE) 3.6(Build 1120)
Windows XP(Build 2600: Service Pack 1)

Start time : Mon Oct 11 2004 15:38:20

Load Damage Cleanup Template (DCT) "C:\Documents and Settings\hilary\Desktop\New Folder\tsc.ptn" (version 432) [success]

Complete time : Mon Oct 11 2004 15:39:44
Execute pattern count(1288), Virus found count(0), Virus clean count(0), Clean failed count(0)

2004-10-11, 15:40:29, Could not set file for reading on "C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp": Access is denied.
2004-10-11, 15:40:39, An error occurred while scanning file "C:\Documents and Settings\hilary\ntuser.dat": Access is denied.
2004-10-11, 15:40:39, An error occurred while scanning file "C:\Documents and Settings\hilary\NTUSER.DAT.LOG": Access is denied.
2004-10-11, 15:46:34, An error occurred while scanning file "C:\Documents and Settings\hilary\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat": Access is denied.
2004-10-11, 15:46:34, An error occurred while scanning file "C:\Documents and Settings\hilary\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG": Access is denied.
2004-10-11, 16:47:44, An error was detected on "C:\System Volume Information\*.*": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\ACAD.EXE-0481C2CB.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\ACHELP.EXE-1022BD37.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\ACRORD32.EXE-20C463C1.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\AD-AWARE.EXE-2ED3360E.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\ADOBE GAMMA LOADER.EXE-1DBD7BA3.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\AGENT.EXE-10B4BAEA.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGCC32.EXE-2F8E34C8.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGINET.EXE-00383A2D.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGSE.EXE-0ED2F9A5.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGW.EXE-132EA28D.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGW.EXE-1C9CBC8B.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\CALC.EXE-02CD573A.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\CREATECD50.EXE-08EF798E.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\CREATR50.EXE-00C7BDE9.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\CREATR50.EXE-346C4451.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\CWSHREDDER.EXE-2189EBE5.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\DEFRAG.EXE-273F131E.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\DFRGNTFS.EXE-269967DF.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\DIRECTCD.EXE-0A60B47C.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\DLLCOMPARE.EXE-02E51D5C.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\DRMUPGDS.EXE-1E00EA48.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\DRWTSN32.EXE-2B4B52AC.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\DWWIN.EXE-30875ADC.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\GETPOPUPINFO.EXE-22F2D0C9.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\GLB1A2B.EXE-29754C4E.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\GLB1C.TMP-2A8CE8C1.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\HELPSVC.EXE-2878DDA2.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\HIJACKTHIS.EXE-276ED22E.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\HPWGTBX.EXE-2B3E34AA.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\HPZENG08.EXE-17CC2EF1.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\IEDIT.EXE-1181A838.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\INS6.TMP.EXE-144D2922.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\INSTALL.EXE-0EAC8F48.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\IS-OBAJJ.TMP-36AA1D58.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\IS-OEG5E.TMP-2A6BB14C.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\JUSCHED.EXE-30BDEFBB.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\KILLBOX.EXE-2D21C8E3.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\Layout.ini": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\LOGAGENT.EXE-027AF92B.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\LOGON.SCR-151EFAEA.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\MIGRATE.EXE-2371812C.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\MMC.EXE-15688AA5.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\MOZILLA.EXE-015BD8C5.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\MOZILLA.EXE-218B86F4.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\MPSETUP.EXE-22DD3B19.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\MSHEARTS.EXE-0D7FE295.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\MSNMUSIC.EXE-1CF6948F.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\MSOHELP.EXE-079DA48B.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\MSWORKS.EXE-31812CA4.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\MUSICCONVERTER.EXE-0510E7B7.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\NDN01.EXE-10D9C180.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\NOADWARE.EXE-1476A1DC.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\NOADWARE.EXE-39A02959.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\NTVDM.EXE-1A10A423.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\NWIZ.EXE-2D0F9FBC.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\OSA9.EXE-27CD7DB8.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\PINBALL.EXE-1233165F.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\RAZORLAME.EXE-2DBC0FF2.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\RAZORLAME.EXE-2ED42666.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\REGEDIT.EXE-1B606482.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-15E942E0.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-19AABF21.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-1E5CA7E8.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-1FA30313.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-268BFF96.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-35BB92D4.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-3603C23A.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-3991BA19.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-3B684387.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-3CCC46C7.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-445649BB.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-451FC2C0.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-4825CA9B.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP.EXE-393E66AE.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP_WM.EXE-099E5AEC.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP_WM.EXE-3135CBD6.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP_WM.EXE-38D82D00.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\SNDVOL32.EXE-383480B7.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\SOL.EXE-1C0C14EB.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\SPIDER.EXE-2D998CA6.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\SPYBOTSD.EXE-1344276B.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\SPYSWEEPER.EXE-15D18B6A.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\SSFSETUP1_1765336557.EXE-2E9557BC.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\TASKMGR.EXE-20256C55.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\TASKPANL.EXE-179224B9.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\TRAYCTL.EXE-3AD6BC1E.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\UNREGMP2.EXE-07CACB61.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\UNREGMP2.EXE-37055736.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\USERINIT.EXE-30B18140.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\USSSHREG.EXE-2DC0F479.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\VSMON.EXE-1609C098.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WINHLP32.EXE-2C18E975.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WINMINE.EXE-0A3838A4.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WINWORD.EXE-10D55173.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WINZIP32.EXE-335422C1.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WKDETECT.EXE-317B1611.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WKFUD.EXE-03C88000.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WKSSB.EXE-01DCAEEA.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WMPENC.EXE-32AC5B95.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WMPLAYER.EXE-18DDEF9C.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WMPLAYER.EXE-1D2F70DE.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WMPLAYER.EXE-1D2F70E3.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WUPDMGR.EXE-2F30BEAB.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\ZLCLIENT.EXE-02918DDB.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\ZLCLIENT.EXE-1C550EB2.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\ZLSSETUP_51_033_000.EXE-06D3C456.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\ZLUNWISE.EXE-071D246F.pf": Access is denied.
2004-10-11, 16:55:10, An error occurred while scanning file "C:\WINDOWS\system32\config\default": Access is denied.
2004-10-11, 16:55:10, An error occurred while scanning file "C:\WINDOWS\system32\config\default.LOG": Access is denied.
2004-10-11, 16:55:10, An error occurred while scanning file "C:\WINDOWS\system32\config\SAM": Access is denied.
2004-10-11, 16:55:10, An error occurred while scanning file "C:\WINDOWS\system32\config\SAM.LOG": Access is denied.
2004-10-11, 16:55:10, An error occurred while scanning file "C:\WINDOWS\system32\config\SECURITY": Access is denied.
2004-10-11, 16:55:10, An error occurred while scanning file "C:\WINDOWS\system32\config\SECURITY.LOG": Access is denied.
2004-10-11, 16:55:10, An error occurred while scanning file "C:\WINDOWS\system32\config\software": Access is denied.
2004-10-11, 16:55:10, An error occurred while scanning file "C:\WINDOWS\system32\config\software.LOG": Access is denied.
2004-10-11, 16:55:11, An error occurred while scanning file "C:\WINDOWS\system32\config\system": Access is denied.
2004-10-11, 16:55:11, An error occurred while scanning file "C:\WINDOWS\system32\config\system.LOG": Access is denied.
2004-10-11, 16:59:26, Running scanner "C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN"...
2004-10-11, 17:30:19, Files Detected:
Copyright (c) 1990 - 2004 Trend Micro Inc.
Report Date : 10/11/2004 16:59:27
VSAPI Engine Version : 7.000-1004
VSCANTM Version : 1.1-1001
Virus Pattern Version : 194 (72847 Patterns) (2004/10/10) (219400)
Command Line: C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\Documents and Settings\hilary\Desktop\New Folder

43475 files have been read.
43475 files have been checked.
31201 files have been scanned.
46490 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 10/11/2004 17:30:18
---------*---------*---------*---------*---------*---------*---------*---------*
2004-10-11, 17:30:19, Files Clean:
Copyright (c) 1990 - 2004 Trend Micro Inc.
Report Date : 10/11/2004 16:59:27
VSAPI Engine Version : 7.000-1004
VSCANTM Version : 1.1-1001
Virus Pattern Version : 194 (72847 Patterns) (2004/10/10) (219400)
Command Line: C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\Documents and Settings\hilary\Desktop\New Folder

43475 files have been read.
43475 files have been checked.
31201 files have been scanned.
46490 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 10/11/2004 17:30:18 30 minutes 47 seconds (1847.02 seconds) has elapsed.

---------*---------*---------*---------*---------*---------*---------*---------*
2004-10-11, 17:30:19, Clean Fail:
Copyright (c) 1990 - 2004 Trend Micro Inc.
Report Date : 10/11/2004 16:59:27
VSAPI Engine Version : 7.000-1004
VSCANTM Version : 1.1-1001
Virus Pattern Version : 194 (72847 Patterns) (2004/10/10) (219400)
Command Line: C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\Documents and Settings\hilary\Desktop\New Folder

43475 files have been read.
43475 files have been checked.
31201 files have been scanned.
46490 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 10/11/2004 17:30:18 30 minutes 47 seconds (1847.02 seconds) has elapsed.

---------*---------*---------*---------*---------*---------*---------*---------*
2004-10-11, 17:30:19, Scanner "C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN" has finished running.


/--------------------------------------------------------------\
| Trend Micro Sysclean Package |
| Copyright 2002, Trend Micro, Inc. |
| http://www.trendmicro.com |
\--------------------------------------------------------------/


2004-10-11, 17:43:29, Auto-clean mode specified.
2004-10-11, 17:43:29, Running scanner "C:\Documents and Settings\hilary\Desktop\New Folder\TSC.BIN"...
2004-10-11, 17:43:42, Scanner "C:\Documents and Settings\hilary\Desktop\New Folder\TSC.BIN" has finished running.
2004-10-11, 17:43:42, TSC Log:

Damage Cleanup Engine (DCE) 3.6(Build 1120)
Windows XP(Build 2600: Service Pack 1)

Start time : Mon Oct 11 2004 17:43:29

Load Damage Cleanup Template (DCT) "C:\Documents and Settings\hilary\Desktop\New Folder\tsc.ptn" (version 432) [success]

Complete time : Mon Oct 11 2004 17:43:42
Execute pattern count(1288), Virus found count(0), Virus clean count(0), Clean failed count(0)

2004-10-11, 17:44:04, Could not set file for reading on "C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp": Access is denied.
2004-10-11, 17:44:11, An error occurred while scanning file "C:\Documents and Settings\hilary\ntuser.dat": Access is denied.
2004-10-11, 17:44:11, An error occurred while scanning file "C:\Documents and Settings\hilary\NTUSER.DAT.LOG": Access is denied.
2004-10-11, 17:46:11, An error occurred while scanning file "C:\Documents and Settings\hilary\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat": Access is denied.
2004-10-11, 17:46:11, An error occurred while scanning file "C:\Documents and Settings\hilary\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG": Access is denied.
2004-10-11, 17:57:27, An error occurred while scanning file "C:\Documents and Settings\LocalService\NTUSER.DAT": Access is denied.
2004-10-11, 17:57:27, An error occurred while scanning file "C:\Documents and Settings\LocalService\ntuser.dat.LOG": Access is denied.
2004-10-11, 17:57:27, An error occurred while scanning file "C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat": Access is denied.
2004-10-11, 17:57:27, An error occurred while scanning file "C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG": Access is denied.
2004-10-11, 17:57:27, An error occurred while scanning file "C:\Documents and Settings\NetworkService\NTUSER.DAT": Access is denied.
2004-10-11, 17:57:27, An error occurred while scanning file "C:\Documents and Settings\NetworkService\ntuser.dat.LOG": Access is denied.
2004-10-11, 17:57:27, An error occurred while scanning file "C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat": Access is denied.
2004-10-11, 17:57:27, An error occurred while scanning file "C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG": Access is denied.
2004-10-11, 18:06:47, An error was detected on "C:\System Volume Information\*.*": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\ACAD.EXE-0481C2CB.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\ACHELP.EXE-1022BD37.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\ACRORD32.EXE-20C463C1.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\AD-AWARE.EXE-2ED3360E.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\ADOBE GAMMA LOADER.EXE-1DBD7BA3.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\AGENT.EXE-10B4BAEA.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGCC32.EXE-2F8E34C8.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGINET.EXE-00383A2D.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGSE.EXE-0ED2F9A5.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGW.EXE-132EA28D.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGW.EXE-1C9CBC8B.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\CALC.EXE-02CD573A.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\CREATECD50.EXE-08EF798E.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\CREATR50.EXE-00C7BDE9.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\CREATR50.EXE-346C4451.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\CWSHREDDER.EXE-2189EBE5.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\DEFRAG.EXE-273F131E.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\DFRGNTFS.EXE-269967DF.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\DIRECTCD.EXE-0A60B47C.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\DLLCOMPARE.EXE-02E51D5C.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\DRMUPGDS.EXE-1E00EA48.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\DRWTSN32.EXE-2B4B52AC.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\DWWIN.EXE-30875ADC.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\GETPOPUPINFO.EXE-22F2D0C9.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\GLB1A2B.EXE-29754C4E.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\GLB1C.TMP-2A8CE8C1.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\HELPSVC.EXE-2878DDA2.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\HIJACKTHIS.EXE-276ED22E.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\HPWGTBX.EXE-2B3E34AA.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\HPZENG08.EXE-17CC2EF1.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\IEDIT.EXE-1181A838.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\INS6.TMP.EXE-144D2922.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\INSTALL.EXE-0EAC8F48.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\IS-OBAJJ.TMP-36AA1D58.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\IS-OEG5E.TMP-2A6BB14C.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\JUSCHED.EXE-30BDEFBB.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\KILLBOX.EXE-2D21C8E3.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\Layout.ini": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\LOGAGENT.EXE-027AF92B.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\LOGON.SCR-151EFAEA.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\MIGRATE.EXE-2371812C.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\MMC.EXE-15688AA5.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\MOZILLA.EXE-015BD8C5.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\MOZILLA.EXE-218B86F4.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\MPSETUP.EXE-22DD3B19.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\MSHEARTS.EXE-0D7FE295.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\MSNMUSIC.EXE-1CF6948F.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\MSOHELP.EXE-079DA48B.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\MSWORKS.EXE-31812CA4.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\MUSICCONVERTER.EXE-0510E7B7.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\NDN01.EXE-10D9C180.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\NOADWARE.EXE-1476A1DC.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\NOADWARE.EXE-39A02959.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\NTVDM.EXE-1A10A423.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\NWIZ.EXE-2D0F9FBC.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\OSA9.EXE-27CD7DB8.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\PINBALL.EXE-1233165F.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RAZORLAME.EXE-2DBC0FF2.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RAZORLAME.EXE-2ED42666.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\REGEDIT.EXE-1B606482.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-15E942E0.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-19AABF21.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-1E5CA7E8.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-1FA30313.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-268BFF96.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-35BB92D4.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-3603C23A.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-3991BA19.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-3B684387.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-3CCC46C7.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-445649BB.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-451FC2C0.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-4825CA9B.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP.EXE-393E66AE.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP_WM.EXE-099E5AEC.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP_WM.EXE-3135CBD6.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP_WM.EXE-38D82D00.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\SNDVOL32.EXE-383480B7.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\SOL.EXE-1C0C14EB.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\SPIDER.EXE-2D998CA6.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\SPYBOTSD.EXE-1344276B.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\SPYSWEEPER.EXE-15D18B6A.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\SSFSETUP1_1765336557.EXE-2E9557BC.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\SYSCLEAN.COM-0E97C985.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\SYSCLEAN.EXE-1A46CBB8.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\TASKMGR.EXE-20256C55.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\TASKPANL.EXE-179224B9.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\TRAYCTL.EXE-3AD6BC1E.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\TSC.BIN-18C04EF7.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\UNREGMP2.EXE-07CACB61.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\UNREGMP2.EXE-37055736.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\USERINIT.EXE-30B18140.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\USSSHREG.EXE-2DC0F479.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\VSMON.EXE-1609C098.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WINHLP32.EXE-2C18E975.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WINMINE.EXE-0A3838A4.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WINWORD.EXE-10D55173.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WINZIP32.EXE-335422C1.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WKDETECT.EXE-317B1611.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WKFUD.EXE-03C88000.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WKSSB.EXE-01DCAEEA.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WMPENC.EXE-32AC5B95.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WMPLAYER.EXE-18DDEF9C.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WMPLAYER.EXE-1D2F70DE.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WMPLAYER.EXE-1D2F70E3.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WUPDMGR.EXE-2F30BEAB.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\ZLCLIENT.EXE-02918DDB.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\ZLCLIENT.EXE-1C550EB2.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\ZLSSETUP_51_033_000.EXE-06D3C456.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\ZLUNWISE.EXE-071D246F.pf": Access is denied.
2004-10-11, 18:10:54, An error occurred while scanning file "C:\WINDOWS\system32\config\default": Access is denied.
2004-10-11, 18:10:54, An error occurred while scanning file "C:\WINDOWS\system32\config\default.LOG": Access is denied.
2004-10-11, 18:10:54, An error occurred while scanning file "C:\WINDOWS\system32\config\SAM": Access is denied.
2004-10-11, 18:10:54, An error occurred while scanning file "C:\WINDOWS\system32\config\SAM.LOG": Access is denied.
2004-10-11, 18:10:54, An error occurred while scanning file "C:\WINDOWS\system32\config\SECURITY": Access is denied.
2004-10-11, 18:10:54, An error occurred while scanning file "C:\WINDOWS\system32\config\SECURITY.LOG": Access is denied.
2004-10-11, 18:10:54, An error occurred while scanning file "C:\WINDOWS\system32\config\software": Access is denied.
2004-10-11, 18:10:54, An error occurred while scanning file "C:\WINDOWS\system32\config\software.LOG": Access is denied.
2004-10-11, 18:10:54, An error occurred while scanning file "C:\WINDOWS\system32\config\system": Access is denied.
2004-10-11, 18:10:54, An error occurred while scanning file "C:\WINDOWS\system32\config\system.LOG": Access is denied.
2004-10-11, 18:13:07, An error occurred while scanning file "C:\WINDOWS\Temp\Perflib_Perfdata_6a8.dat": Access is denied.
2004-10-11, 18:13:07, An error occurred while scanning file "C:\WINDOWS\Temp\ZLT0222e.TMP": Access is denied.
2004-10-11, 18:13:13, Running scanner "C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN"...
2004-10-11, 18:36:30, Files Detected:
Copyright (c) 1990 - 2004 Trend Micro Inc.
Report Date : 10/11/2004 18:13:14
VSAPI Engine Version : 7.000-1004
VSCANTM Version : 1.1-1001
Virus Pattern Version : 194 (72847 Patterns) (2004/10/10) (219400)
Command Line: C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\Documents and Settings\hilary\Desktop\New Folder

43479 files have been read.
43479 files have been checked.
31197 files have been scanned.
46486 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 10/11/2004 18:36:30
---------*---------*---------*---------*---------*---------*---------*---------*
2004-10-11, 18:36:30, Files Clean:
Copyright (c) 1990 - 2004 Trend Micro Inc.
Report Date : 10/11/2004 18:13:13
VSAPI Engine Version : 7.000-1004
VSCANTM Version : 1.1-1001
Virus Pattern Version : 194 (72847 Patterns) (2004/10/10) (219400)
Command Line: C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\Documents and Settings\hilary\Desktop\New Folder

43479 files have been read.
43479 files have been checked.
31197 files have been scanned.
46486 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 10/11/2004 18:36:30 23 minutes 15 seconds (1395.76 seconds) has elapsed.

---------*---------*---------*---------*---------*---------*---------*---------*
2004-10-11, 18:36:30, Clean Fail:
Copyright (c) 1990 - 2004 Trend Micro Inc.
Report Date : 10/11/2004 18:13:13
VSAPI Engine Version : 7.000-1004
VSCANTM Version : 1.1-1001
Virus Pattern Version : 194 (72847 Patterns) (2004/10/10) (219400)
Command Line: C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\Documents and Settings\hilary\Desktop\New Folder

43479 files have been read.
43479 files have been checked.
31197 files have been scanned.
46486 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 10/11/2004 18:36:30 23 minutes 15 seconds (1395.76 seconds) has elapsed.

---------*---------*---------*---------*---------*---------*---------*---------*
2004-10-11, 18:36:30, Scanner "C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN" has finished running.


/--------------------------------------------------------------\
| Trend Micro Sysclean Package |
| Copyright 2002, Trend Micro, Inc. |
| http://www.trendmicro.com |
\--------------------------------------------------------------/


2004-10-12, 11:30:16, Auto-clean mode specified.
2004-10-12, 11:30:16, Running scanner "C:\Documents and Settings\hilary\Desktop\New Folder\TSC.BIN"...
2004-10-12, 11:30:26, Scanner "C:\Documents and Settings\hilary\Desktop\New Folder\TSC.BIN" has finished running.
2004-10-12, 11:30:26, TSC Log:

Damage Cleanup Engine (DCE) 3.6(Build 1120)
Windows XP(Build 2600: Service Pack 1)

Start time : Tue Oct 12 2004 11:30:17

Load Damage Cleanup Template (DCT) "C:\Documents and Settings\hilary\Desktop\New Folder\tsc.ptn" (version 432) [success]

Complete time : Tue Oct 12 2004 11:30:26
Execute pattern count(1288), Virus found count(0), Virus clean count(0), Clean failed count(0)

2004-10-12, 11:30:50, Could not set file for reading on "C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp": Access is denied.
2004-10-12, 11:30:57, An error occurred while scanning file "C:\Documents and Settings\hilary\ntuser.dat": Access is denied.
2004-10-12, 11:30:57, An error occurred while scanning file "C:\Documents and Settings\hilary\NTUSER.DAT.LOG": Access is denied.
2004-10-12, 11:32:58, An error occurred while scanning file "C:\Documents and Settings\hilary\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat": Access is denied.
2004-10-12, 11:32:58, An error occurred while scanning file "C:\Documents and Settings\hilary\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG": Access is denied.
2004-10-12, 11:44:19, An error occurred while scanning file "C:\Documents and Settings\LocalService\NTUSER.DAT": Access is denied.
2004-10-12, 11:44:19, An error occurred while scanning file "C:\Documents and Settings\LocalService\ntuser.dat.LOG": Access is denied.
2004-10-12, 11:44:19, An error occurred while scanning file "C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat": Access is denied.
2004-10-12, 11:44:19, An error occurred while scanning file "C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG": Access is denied.
2004-10-12, 11:44:19, An error occurred while scanning file "C:\Documents and Settings\NetworkService\NTUSER.DAT": Access is denied.
2004-10-12, 11:44:19, An error occurred while scanning file "C:\Documents and Settings\NetworkService\ntuser.dat.LOG": Access is denied.
2004-10-12, 11:44:19, An error occurred while scanning file "C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat": Access is denied.
2004-10-12, 11:44:19, An error occurred while scanning file "C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG": Access is denied.
2004-10-12, 11:53:33, An error was detected on "C:\System Volume Information\*.*": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\ACAD.EXE-0481C2CB.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\ACHELP.EXE-1022BD37.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\ACRORD32.EXE-20C463C1.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\AD-AWARE.EXE-2ED3360E.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\ADOBE GAMMA LOADER.EXE-1DBD7BA3.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\AGENT.EXE-10B4BAEA.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGCC32.EXE-2F8E34C8.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGINET.EXE-00383A2D.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGSE.EXE-0ED2F9A5.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGW.EXE-132EA28D.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGW.EXE-1C9CBC8B.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\CALC.EXE-02CD573A.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\CREATECD50.EXE-08EF798E.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\CREATR50.EXE-00C7BDE9.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\CREATR50.EXE-346C4451.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\CWSHREDDER.EXE-2189EBE5.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\DEFRAG.EXE-273F131E.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\DFRGNTFS.EXE-269967DF.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\DIRECTCD.EXE-0A60B47C.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\DLLCOMPARE.EXE-02E51D5C.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\DRMUPGDS.EXE-1E00EA48.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\DRWTSN32.EXE-2B4B52AC.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\DWWIN.EXE-30875ADC.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\GETPOPUPINFO.EXE-22F2D0C9.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\GLB1A2B.EXE-29754C4E.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\GLB1C.TMP-2A8CE8C1.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\HELPSVC.EXE-2878DDA2.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\HIJACKTHIS.EXE-276ED22E.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\HPWGTBX.EXE-2B3E34AA.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\HPZENG08.EXE-17CC2EF1.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\IEDIT.EXE-1181A838.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\INS6.TMP.EXE-144D2922.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\INSTALL.EXE-0EAC8F48.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\IS-OBAJJ.TMP-36AA1D58.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\IS-OEG5E.TMP-2A6BB14C.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\JUSCHED.EXE-30BDEFBB.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\KILLBOX.EXE-2D21C8E3.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\Layout.ini": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\LOGAGENT.EXE-027AF92B.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\LOGON.SCR-151EFAEA.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\MIGRATE.EXE-2371812C.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\MMC.EXE-15688AA5.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\MOZILLA.EXE-015BD8C5.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\MOZILLA.EXE-218B86F4.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\MPSETUP.EXE-22DD3B19.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\MSHEARTS.EXE-0D7FE295.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\MSNMUSIC.EXE-1CF6948F.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\MSOHELP.EXE-079DA48B.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\MSWORKS.EXE-31812CA4.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\MUSICCONVERTER.EXE-0510E7B7.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\NDN01.EXE-10D9C180.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\NOADWARE.EXE-1476A1DC.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\NOADWARE.EXE-39A02959.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\NTVDM.EXE-1A10A423.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\NWIZ.EXE-2D0F9FBC.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\OSA9.EXE-27CD7DB8.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\PINBALL.EXE-1233165F.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RAZORLAME.EXE-2DBC0FF2.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RAZORLAME.EXE-2ED42666.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\REGEDIT.EXE-1B606482.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-15E942E0.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-19AABF21.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-1E5CA7E8.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-1FA30313.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-268BFF96.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-35BB92D4.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-3603C23A.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-3991BA19.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-3B684387.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-3CCC46C7.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-445649BB.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-451FC2C0.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-4825CA9B.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP.EXE-393E66AE.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP_WM.EXE-099E5AEC.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP_WM.EXE-3135CBD6.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP_WM.EXE-38D82D00.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\SNDVOL32.EXE-383480B7.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\SOL.EXE-1C0C14EB.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\SPIDER.EXE-2D998CA6.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\SPYBOTSD.EXE-1344276B.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\SPYSWEEPER.EXE-15D18B6A.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\SSFSETUP1_1765336557.EXE-2E9557BC.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\SYSCLEAN.COM-0E97C985.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\SYSCLEAN.EXE-1A46CBB8.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\TASKMGR.EXE-20256C55.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\TASKPANL.EXE-179224B9.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\TRAYCTL.EXE-3AD6BC1E.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\TSC.BIN-18C04EF7.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\UNREGMP2.EXE-07CACB61.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\UNREGMP2.EXE-37055736.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\USERINIT.EXE-30B18140.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\USSSHREG.EXE-2DC0F479.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\VSCANTM.BIN-1B5576BF.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\VSMON.EXE-1609C098.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WINHLP32.EXE-2C18E975.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WINMINE.EXE-0A3838A4.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WINWORD.EXE-10D55173.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WINZIP32.EXE-335422C1.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WKDETECT.EXE-317B1611.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WKFUD.EXE-03C88000.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WKSSB.EXE-01DCAEEA.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WMPENC.EXE-32AC5B95.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WMPLAYER.EXE-18DDEF9C.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WMPLAYER.EXE-1D2F70DE.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WMPLAYER.EXE-1D2F70E3.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WUPDMGR.EXE-2F30BEAB.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\ZLCLIENT.EXE-02918DDB.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\ZLCLIENT.EXE-1C550EB2.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\ZLSSETUP_51_033_000.EXE-06D3C456.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\ZLUNWISE.EXE-071D246F.pf": Access is denied.
2004-10-12, 11:56:01, An error occurred while scanning file "C:\WINDOWS\SoftwareDistribution\EventCache\{329833CC-1BA7-4A7E-9DB6-424E5429928C}.bin": Access is denied.
2004-10-12, 11:56:01, An error occurred while scanning file "C:\WINDOWS\SoftwareDistribution\EventCache\{8AB1E37E-F848-4580-B519-C1BD5CDAD193}.bin": Access is denied.
2004-10-12, 11:57:43, An error occurred while scanning file "C:\WINDOWS\system32\config\default": Access is denied.
2004-10-12, 11:57:43, An error occurred while scanning file "C:\WINDOWS\system32\config\default.LOG": Access is denied.
2004-10-12, 11:57:43, An error occurred while scanning file "C:\WINDOWS\system32\config\SAM": Access is denied.
2004-10-12, 11:57:43, An error occurred while scanning file "C:\WINDOWS\system32\config\SAM.LOG": Access is denied.
2004-10-12, 11:57:43, An error occurred while scanning file "C:\WINDOWS\system32\config\SECURITY": Access is denied.
2004-10-12, 11:57:43, An error occurred while scanning file "C:\WINDOWS\system32\config\SECURITY.LOG": Access is denied.
2004-10-12, 11:57:43, An error occurred while scanning file "C:\WINDOWS\system32\config\software": Access is denied.
2004-10-12, 11:57:43, An error occurred while scanning file "C:\WINDOWS\system32\config\software.LOG": Access is denied.
2004-10-12, 11:57:43, An error occurred while scanning file "C:\WINDOWS\system32\config\system": Access is denied.
2004-10-12, 11:57:43, An error occurred while scanning file "C:\WINDOWS\system32\config\system.LOG": Access is denied.
2004-10-12, 11:59:51, An error occurred while scanning file "C:\WINDOWS\Temp\Perflib_Perfdata_4ec.dat": Access is denied.
2004-10-12, 11:59:55, An error occurred while scanning file "C:\WINDOWS\Temp\ZLT04408.TMP": Access is denied.
2004-10-12, 12:00:00, Running scanner "C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN"...
2004-10-12, 12:23:15, Files Detected:
Copyright (c) 1990 - 2004 Trend Micro Inc.
Report Date : 10/12/2004 12:00:03
VSAPI Engine Version : 7.000-1004
VSCANTM Version : 1.1-1001
Virus Pattern Version : 194 (72847 Patterns) (2004/10/10) (219400)
Command Line: C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\Documents and Settings\hilary\Desktop\New Folder

43482 files have been read.
43482 files have been checked.
31196 files have been scanned.
46485 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 10/12/2004 12:23:15
---------*---------*---------*---------*---------*---------*---------*---------*
2004-10-12, 12:23:15, Files Clean:
Copyright (c) 1990 - 2004 Trend Micro Inc.
Report Date : 10/12/2004 12:00:03
VSAPI Engine Version : 7.000-1004
VSCANTM Version : 1.1-1001
Virus Pattern Version : 194 (72847 Patterns) (2004/10/10) (219400)
Command Line: C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\Documents and Settings\hilary\Desktop\New Folder

43482 files have been read.
43482 files have been checked.
31196 files have been scanned.
46485 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 10/12/2004 12:23:15 23 minutes 11 seconds (1391.13 seconds) has elapsed.

---------*---------*---------*---------*---------*---------*---------*---------*
2004-10-12, 12:23:15, Clean Fail:
Copyright (c) 1990 - 2004 Trend Micro Inc.
Report Date : 10/12/2004 12:00:03
VSAPI Engine Version : 7.000-1004
VSCANTM Version : 1.1-1001
Virus Pattern Version : 194 (72847 Patterns) (2004/10/10) (219400)
Command Line: C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\Documents and Settings\hilary\Desktop\New Folder

43482 files have been read.
43482 files have been checked.
31196 files have been scanned.
46485 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 10/12/2004 12:23:15 23 minutes 11 seconds (1391.13 seconds) has elapsed.

---------*---------*---------*---------*---------*---------*---------*---------*
2004-10-12, 12:23:15, Scanner "C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN" has finished running.
 
H

hilary

update:
I uninstalled AVG, ran lavasoft ad-aware which finally found the
bispies, then reinstalled AVG and made new rescue disks, plus put back
thanks for your help. sadly, the problem doesn't seem to be fixed. The
first safe mode full scan turned up nothing, but when running the second
full scan, I go an AVG window saying it had found bispy.a (as usual, in
a folder that doesn't seem to exist, in spite of the fact i have
explorer set to show hidden files). Ran sysclean again, same result,
which each time has been that it finds no viruses, cleans no viruses,
has access denied to countless prefetch subfolders and several system 32
folders, as well as a few others (log is attached).
It seems possible that sysclean is finding it briefly, which alerts avg,
but then the bispy migrates. don't get why it doesn't register with
sysclean's log though. all that denied access is making me suspicious,
though.
thanks,
hilary




1) Download the following two items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download sysclean.com and place it in that directory.
Dowload the signature files (pattern files) by obtaining the ZIP file.
For example; lpt194.zip

Extract the contents of the ZIP file and place the contents in the
same directory as
sysclean.com.

2) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
3) Reboot your PC into Safe Mode
4) Using the Trend Sysclean utility, perform a Full Scan of your
platform and
clean/delete any infectors found
5) Restart your PC and perform a "final" Full Scan of your platform
6) If you are using WinME or WinXP,Re-enable System Restore and
re-apply any
System Restore preferences, (e.g. HD space to use
suggested 400 ~ 600MB),
7) Reboot your PC.
8) If you are using WinME or WinXP, create a new Restore point
9) Please report back your results

Dave




| can anybody help me with this: when I run Ad-Aware SE an AVG window
pops
| up to say my computer's infected with bispy.a and bispy.b. Generally,
| when i look in their purported locations, there's nothing there. AVG
and
| ad-aware are up to date. I've also run spy sweeper and some other spy
| seekers, which don't find it. I ran HijackThis, with these results:
|
| Logfile of HijackThis v1.97.7
| Scan saved at 2:27:41 PM, on 10/11/2004
| Platform: Windows XP SP1 (WinNT 5.01.2600)
| MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
|
| Running processes:
| C:\WINDOWS\System32\smss.exe
| C:\WINDOWS\system32\csrss.exe
| C:\WINDOWS\system32\winlogon.exe
| C:\WINDOWS\system32\services.exe
| C:\WINDOWS\system32\lsass.exe
| C:\WINDOWS\system32\svchost.exe
| C:\WINDOWS\System32\svchost.exe
| C:\WINDOWS\System32\svchost.exe
| C:\WINDOWS\System32\svchost.exe
| C:\WINDOWS\system32\spoolsv.exe
| C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
| C:\WINDOWS\System32\nvsvc32.exe
| C:\WINDOWS\System32\tcpsvcs.exe
| C:\WINDOWS\System32\snmp.exe
| C:\WINDOWS\System32\wdfmgr.exe
| C:\WINDOWS\system32\ZoneLabs\vsmon.exe
| C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
| C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
| C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
| C:\WINDOWS\System32\wuauclt.exe
| C:\PROGRA~1\Grisoft\AVG6\AVGCC32.EXE
| C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
| C:\WINDOWS\explorer.exe
| C:\Documents and Settings\hilary\Desktop\download\HijackThis.exe
|
| R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
| http://www.mozilla.org/start
| R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
| http://www.mozilla.org/start
| O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
| C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
| O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} -
| C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
| O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -
| C:\WINDOWS\System32\msdxm.ocx
| O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE
| C:\WINDOWS\System32\NvCpl.dll,NvStartup
| O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
| O4 - HKLM\..\Run: [AdaptecDirectCD] C:\Program Files\Roxio\Easy CD
| Creator 5\DirectCD\DirectCD.exe
| O4 - HKLM\..\Run: [USSShReg]
| C:\PROGRA~1\ULEADS~1\ULEADP~1.2\SSaver\Ussshreg.exe /r
| O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
| O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program
Files\Microsoft
| Works\WksSb.exe /AllUsers
| O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program
| Files\Microsoft Works\WkDetect.exe
| O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe
/STARTUP
| O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program
| Files\Java\j2re1.4.2_05\bin\jusched.exe
| O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone
| Labs\ZoneAlarm\zlclient.exe"
| O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy
| Sweeper\SpySweeper.exe" /0
| O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common
| Files\Adobe\Calibration\Adobe Gamma Loader.exe
| O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
| Office\Office\OSA9.EXE
| O8 - Extra context menu item: &Define - C:\Program Files\Common
| Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
| O8 - Extra context menu item: Look Up in &Encyclopedia - C:\Program
| Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
| O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
| O9 - Extra button: Encarta Encyclopedia (HKLM)
| O9 - Extra 'Tools' menuitem: Encarta Encyclopedia (HKLM)
| O9 - Extra button: Define (HKLM)
| O9 - Extra 'Tools' menuitem: Define (HKLM)
| O12 - Plugin for .mp3: C:\Program Files\Internet
| Explorer\PLUGINS\npqtplugin3.dll
| O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus
| scanner) -
| http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
| O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI
| Utility Class) -
| http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
| O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) -
| file://C:\Program Files\Autodesk Architectural Desktop 3\AcDcToday.ocx
| O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) -
| file://C:\Program Files\Autodesk Architectural Desktop 3\InstBanr.ocx
| O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) -
| file://C:\Program Files\Autodesk Architectural Desktop 3\InstFred.ocx
| O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash
| Object) -
| http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
| O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) -
| file://C:\Program Files\Autodesk Architectural Desktop 3\AcPreview.ocx
|
|
| thanks


------------------------------------------------------------------------



/--------------------------------------------------------------\
| Trend Micro Sysclean Package |
| Copyright 2002, Trend Micro, Inc. |
| http://www.trendmicro.com |
\--------------------------------------------------------------/


2004-10-11, 15:38:19, Auto-clean mode specified.
2004-10-11, 15:38:19, Running scanner "C:\Documents and Settings\hilary\Desktop\New Folder\TSC.BIN"...
2004-10-11, 15:39:44, Scanner "C:\Documents and Settings\hilary\Desktop\New Folder\TSC.BIN" has finished running.
2004-10-11, 15:39:44, TSC Log:

Damage Cleanup Engine (DCE) 3.6(Build 1120)
Windows XP(Build 2600: Service Pack 1)

Start time : Mon Oct 11 2004 15:38:20

Load Damage Cleanup Template (DCT) "C:\Documents and Settings\hilary\Desktop\New Folder\tsc.ptn" (version 432) [success]

Complete time : Mon Oct 11 2004 15:39:44
Execute pattern count(1288), Virus found count(0), Virus clean count(0), Clean failed count(0)

2004-10-11, 15:40:29, Could not set file for reading on "C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp": Access is denied.
2004-10-11, 15:40:39, An error occurred while scanning file "C:\Documents and Settings\hilary\ntuser.dat": Access is denied.
2004-10-11, 15:40:39, An error occurred while scanning file "C:\Documents and Settings\hilary\NTUSER.DAT.LOG": Access is denied.
2004-10-11, 15:46:34, An error occurred while scanning file "C:\Documents and Settings\hilary\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat": Access is denied.
2004-10-11, 15:46:34, An error occurred while scanning file "C:\Documents and Settings\hilary\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG": Access is denied.
2004-10-11, 16:47:44, An error was detected on "C:\System Volume Information\*.*": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\ACAD.EXE-0481C2CB.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\ACHELP.EXE-1022BD37.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\ACRORD32.EXE-20C463C1.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\AD-AWARE.EXE-2ED3360E.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\ADOBE GAMMA LOADER.EXE-1DBD7BA3.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\AGENT.EXE-10B4BAEA.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGCC32.EXE-2F8E34C8.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGINET.EXE-00383A2D.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGSE.EXE-0ED2F9A5.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGW.EXE-132EA28D.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGW.EXE-1C9CBC8B.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\CALC.EXE-02CD573A.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\CREATECD50.EXE-08EF798E.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\CREATR50.EXE-00C7BDE9.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\CREATR50.EXE-346C4451.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\CWSHREDDER.EXE-2189EBE5.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\DEFRAG.EXE-273F131E.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\DFRGNTFS.EXE-269967DF.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\DIRECTCD.EXE-0A60B47C.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\DLLCOMPARE.EXE-02E51D5C.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\DRMUPGDS.EXE-1E00EA48.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\DRWTSN32.EXE-2B4B52AC.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\DWWIN.EXE-30875ADC.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\GETPOPUPINFO.EXE-22F2D0C9.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\GLB1A2B.EXE-29754C4E.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\GLB1C.TMP-2A8CE8C1.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\HELPSVC.EXE-2878DDA2.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\HIJACKTHIS.EXE-276ED22E.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\HPWGTBX.EXE-2B3E34AA.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\HPZENG08.EXE-17CC2EF1.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\IEDIT.EXE-1181A838.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\INS6.TMP.EXE-144D2922.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\INSTALL.EXE-0EAC8F48.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\IS-OBAJJ.TMP-36AA1D58.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\IS-OEG5E.TMP-2A6BB14C.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\JUSCHED.EXE-30BDEFBB.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\KILLBOX.EXE-2D21C8E3.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\Layout.ini": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\LOGAGENT.EXE-027AF92B.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\LOGON.SCR-151EFAEA.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\MIGRATE.EXE-2371812C.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\MMC.EXE-15688AA5.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\MOZILLA.EXE-015BD8C5.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\MOZILLA.EXE-218B86F4.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\MPSETUP.EXE-22DD3B19.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\MSHEARTS.EXE-0D7FE295.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\MSNMUSIC.EXE-1CF6948F.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\MSOHELP.EXE-079DA48B.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\MSWORKS.EXE-31812CA4.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\MUSICCONVERTER.EXE-0510E7B7.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\NDN01.EXE-10D9C180.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\NOADWARE.EXE-1476A1DC.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\NOADWARE.EXE-39A02959.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\NTVDM.EXE-1A10A423.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\NWIZ.EXE-2D0F9FBC.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\OSA9.EXE-27CD7DB8.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\PINBALL.EXE-1233165F.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\RAZORLAME.EXE-2DBC0FF2.pf": Access is denied.
2004-10-11, 16:51:38, Could not set file for reading on "C:\WINDOWS\Prefetch\RAZORLAME.EXE-2ED42666.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\REGEDIT.EXE-1B606482.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-15E942E0.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-19AABF21.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-1E5CA7E8.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-1FA30313.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-268BFF96.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-35BB92D4.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-3603C23A.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-3991BA19.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-3B684387.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-3CCC46C7.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-445649BB.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-451FC2C0.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-4825CA9B.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP.EXE-393E66AE.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP_WM.EXE-099E5AEC.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP_WM.EXE-3135CBD6.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP_WM.EXE-38D82D00.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\SNDVOL32.EXE-383480B7.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\SOL.EXE-1C0C14EB.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\SPIDER.EXE-2D998CA6.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\SPYBOTSD.EXE-1344276B.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\SPYSWEEPER.EXE-15D18B6A.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\SSFSETUP1_1765336557.EXE-2E9557BC.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\TASKMGR.EXE-20256C55.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\TASKPANL.EXE-179224B9.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\TRAYCTL.EXE-3AD6BC1E.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\UNREGMP2.EXE-07CACB61.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\UNREGMP2.EXE-37055736.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\USERINIT.EXE-30B18140.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\USSSHREG.EXE-2DC0F479.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\VSMON.EXE-1609C098.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WINHLP32.EXE-2C18E975.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WINMINE.EXE-0A3838A4.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WINWORD.EXE-10D55173.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WINZIP32.EXE-335422C1.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WKDETECT.EXE-317B1611.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WKFUD.EXE-03C88000.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WKSSB.EXE-01DCAEEA.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WMPENC.EXE-32AC5B95.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WMPLAYER.EXE-18DDEF9C.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WMPLAYER.EXE-1D2F70DE.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WMPLAYER.EXE-1D2F70E3.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\WUPDMGR.EXE-2F30BEAB.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\ZLCLIENT.EXE-02918DDB.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\ZLCLIENT.EXE-1C550EB2.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\ZLSSETUP_51_033_000.EXE-06D3C456.pf": Access is denied.
2004-10-11, 16:51:39, Could not set file for reading on "C:\WINDOWS\Prefetch\ZLUNWISE.EXE-071D246F.pf": Access is denied.
2004-10-11, 16:55:10, An error occurred while scanning file "C:\WINDOWS\system32\config\default": Access is denied.
2004-10-11, 16:55:10, An error occurred while scanning file "C:\WINDOWS\system32\config\default.LOG": Access is denied.
2004-10-11, 16:55:10, An error occurred while scanning file "C:\WINDOWS\system32\config\SAM": Access is denied.
2004-10-11, 16:55:10, An error occurred while scanning file "C:\WINDOWS\system32\config\SAM.LOG": Access is denied.
2004-10-11, 16:55:10, An error occurred while scanning file "C:\WINDOWS\system32\config\SECURITY": Access is denied.
2004-10-11, 16:55:10, An error occurred while scanning file "C:\WINDOWS\system32\config\SECURITY.LOG": Access is denied.
2004-10-11, 16:55:10, An error occurred while scanning file "C:\WINDOWS\system32\config\software": Access is denied.
2004-10-11, 16:55:10, An error occurred while scanning file "C:\WINDOWS\system32\config\software.LOG": Access is denied.
2004-10-11, 16:55:11, An error occurred while scanning file "C:\WINDOWS\system32\config\system": Access is denied.
2004-10-11, 16:55:11, An error occurred while scanning file "C:\WINDOWS\system32\config\system.LOG": Access is denied.
2004-10-11, 16:59:26, Running scanner "C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN"...
2004-10-11, 17:30:19, Files Detected:
Copyright (c) 1990 - 2004 Trend Micro Inc.
Report Date : 10/11/2004 16:59:27
VSAPI Engine Version : 7.000-1004
VSCANTM Version : 1.1-1001
Virus Pattern Version : 194 (72847 Patterns) (2004/10/10) (219400)
Command Line: C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\Documents and Settings\hilary\Desktop\New Folder

43475 files have been read.
43475 files have been checked.
31201 files have been scanned.
46490 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 10/11/2004 17:30:18
---------*---------*---------*---------*---------*---------*---------*---------*
2004-10-11, 17:30:19, Files Clean:
Copyright (c) 1990 - 2004 Trend Micro Inc.
Report Date : 10/11/2004 16:59:27
VSAPI Engine Version : 7.000-1004
VSCANTM Version : 1.1-1001
Virus Pattern Version : 194 (72847 Patterns) (2004/10/10) (219400)
Command Line: C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\Documents and Settings\hilary\Desktop\New Folder

43475 files have been read.
43475 files have been checked.
31201 files have been scanned.
46490 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 10/11/2004 17:30:18 30 minutes 47 seconds (1847.02 seconds) has elapsed.

---------*---------*---------*---------*---------*---------*---------*---------*
2004-10-11, 17:30:19, Clean Fail:
Copyright (c) 1990 - 2004 Trend Micro Inc.
Report Date : 10/11/2004 16:59:27
VSAPI Engine Version : 7.000-1004
VSCANTM Version : 1.1-1001
Virus Pattern Version : 194 (72847 Patterns) (2004/10/10) (219400)
Command Line: C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\Documents and Settings\hilary\Desktop\New Folder

43475 files have been read.
43475 files have been checked.
31201 files have been scanned.
46490 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 10/11/2004 17:30:18 30 minutes 47 seconds (1847.02 seconds) has elapsed.

---------*---------*---------*---------*---------*---------*---------*---------*
2004-10-11, 17:30:19, Scanner "C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN" has finished running.


/--------------------------------------------------------------\
| Trend Micro Sysclean Package |
| Copyright 2002, Trend Micro, Inc. |
| http://www.trendmicro.com |
\--------------------------------------------------------------/


2004-10-11, 17:43:29, Auto-clean mode specified.
2004-10-11, 17:43:29, Running scanner "C:\Documents and Settings\hilary\Desktop\New Folder\TSC.BIN"...
2004-10-11, 17:43:42, Scanner "C:\Documents and Settings\hilary\Desktop\New Folder\TSC.BIN" has finished running.
2004-10-11, 17:43:42, TSC Log:

Damage Cleanup Engine (DCE) 3.6(Build 1120)
Windows XP(Build 2600: Service Pack 1)

Start time : Mon Oct 11 2004 17:43:29

Load Damage Cleanup Template (DCT) "C:\Documents and Settings\hilary\Desktop\New Folder\tsc.ptn" (version 432) [success]

Complete time : Mon Oct 11 2004 17:43:42
Execute pattern count(1288), Virus found count(0), Virus clean count(0), Clean failed count(0)

2004-10-11, 17:44:04, Could not set file for reading on "C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp": Access is denied.
2004-10-11, 17:44:11, An error occurred while scanning file "C:\Documents and Settings\hilary\ntuser.dat": Access is denied.
2004-10-11, 17:44:11, An error occurred while scanning file "C:\Documents and Settings\hilary\NTUSER.DAT.LOG": Access is denied.
2004-10-11, 17:46:11, An error occurred while scanning file "C:\Documents and Settings\hilary\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat": Access is denied.
2004-10-11, 17:46:11, An error occurred while scanning file "C:\Documents and Settings\hilary\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG": Access is denied.
2004-10-11, 17:57:27, An error occurred while scanning file "C:\Documents and Settings\LocalService\NTUSER.DAT": Access is denied.
2004-10-11, 17:57:27, An error occurred while scanning file "C:\Documents and Settings\LocalService\ntuser.dat.LOG": Access is denied.
2004-10-11, 17:57:27, An error occurred while scanning file "C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat": Access is denied.
2004-10-11, 17:57:27, An error occurred while scanning file "C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG": Access is denied.
2004-10-11, 17:57:27, An error occurred while scanning file "C:\Documents and Settings\NetworkService\NTUSER.DAT": Access is denied.
2004-10-11, 17:57:27, An error occurred while scanning file "C:\Documents and Settings\NetworkService\ntuser.dat.LOG": Access is denied.
2004-10-11, 17:57:27, An error occurred while scanning file "C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat": Access is denied.
2004-10-11, 17:57:27, An error occurred while scanning file "C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG": Access is denied.
2004-10-11, 18:06:47, An error was detected on "C:\System Volume Information\*.*": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\ACAD.EXE-0481C2CB.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\ACHELP.EXE-1022BD37.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\ACRORD32.EXE-20C463C1.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\AD-AWARE.EXE-2ED3360E.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\ADOBE GAMMA LOADER.EXE-1DBD7BA3.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\AGENT.EXE-10B4BAEA.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGCC32.EXE-2F8E34C8.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGINET.EXE-00383A2D.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGSE.EXE-0ED2F9A5.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGW.EXE-132EA28D.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGW.EXE-1C9CBC8B.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\CALC.EXE-02CD573A.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\CREATECD50.EXE-08EF798E.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\CREATR50.EXE-00C7BDE9.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\CREATR50.EXE-346C4451.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\CWSHREDDER.EXE-2189EBE5.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\DEFRAG.EXE-273F131E.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\DFRGNTFS.EXE-269967DF.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\DIRECTCD.EXE-0A60B47C.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\DLLCOMPARE.EXE-02E51D5C.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\DRMUPGDS.EXE-1E00EA48.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\DRWTSN32.EXE-2B4B52AC.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\DWWIN.EXE-30875ADC.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\GETPOPUPINFO.EXE-22F2D0C9.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\GLB1A2B.EXE-29754C4E.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\GLB1C.TMP-2A8CE8C1.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\HELPSVC.EXE-2878DDA2.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\HIJACKTHIS.EXE-276ED22E.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\HPWGTBX.EXE-2B3E34AA.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\HPZENG08.EXE-17CC2EF1.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\IEDIT.EXE-1181A838.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\INS6.TMP.EXE-144D2922.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\INSTALL.EXE-0EAC8F48.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\IS-OBAJJ.TMP-36AA1D58.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\IS-OEG5E.TMP-2A6BB14C.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\JUSCHED.EXE-30BDEFBB.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\KILLBOX.EXE-2D21C8E3.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\Layout.ini": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\LOGAGENT.EXE-027AF92B.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\LOGON.SCR-151EFAEA.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\MIGRATE.EXE-2371812C.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\MMC.EXE-15688AA5.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\MOZILLA.EXE-015BD8C5.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\MOZILLA.EXE-218B86F4.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\MPSETUP.EXE-22DD3B19.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\MSHEARTS.EXE-0D7FE295.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\MSNMUSIC.EXE-1CF6948F.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\MSOHELP.EXE-079DA48B.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\MSWORKS.EXE-31812CA4.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\MUSICCONVERTER.EXE-0510E7B7.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\NDN01.EXE-10D9C180.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\NOADWARE.EXE-1476A1DC.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\NOADWARE.EXE-39A02959.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\NTVDM.EXE-1A10A423.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\NWIZ.EXE-2D0F9FBC.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\OSA9.EXE-27CD7DB8.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\PINBALL.EXE-1233165F.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RAZORLAME.EXE-2DBC0FF2.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RAZORLAME.EXE-2ED42666.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\REGEDIT.EXE-1B606482.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-15E942E0.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-19AABF21.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-1E5CA7E8.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-1FA30313.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-268BFF96.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-35BB92D4.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-3603C23A.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-3991BA19.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-3B684387.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-3CCC46C7.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-445649BB.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-451FC2C0.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-4825CA9B.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP.EXE-393E66AE.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP_WM.EXE-099E5AEC.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP_WM.EXE-3135CBD6.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP_WM.EXE-38D82D00.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\SNDVOL32.EXE-383480B7.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\SOL.EXE-1C0C14EB.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\SPIDER.EXE-2D998CA6.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\SPYBOTSD.EXE-1344276B.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\SPYSWEEPER.EXE-15D18B6A.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\SSFSETUP1_1765336557.EXE-2E9557BC.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\SYSCLEAN.COM-0E97C985.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\SYSCLEAN.EXE-1A46CBB8.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\TASKMGR.EXE-20256C55.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\TASKPANL.EXE-179224B9.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\TRAYCTL.EXE-3AD6BC1E.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\TSC.BIN-18C04EF7.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\UNREGMP2.EXE-07CACB61.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\UNREGMP2.EXE-37055736.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\USERINIT.EXE-30B18140.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\USSSHREG.EXE-2DC0F479.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\VSMON.EXE-1609C098.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WINHLP32.EXE-2C18E975.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WINMINE.EXE-0A3838A4.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WINWORD.EXE-10D55173.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WINZIP32.EXE-335422C1.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WKDETECT.EXE-317B1611.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WKFUD.EXE-03C88000.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WKSSB.EXE-01DCAEEA.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WMPENC.EXE-32AC5B95.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WMPLAYER.EXE-18DDEF9C.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WMPLAYER.EXE-1D2F70DE.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WMPLAYER.EXE-1D2F70E3.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\WUPDMGR.EXE-2F30BEAB.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\ZLCLIENT.EXE-02918DDB.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\ZLCLIENT.EXE-1C550EB2.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\ZLSSETUP_51_033_000.EXE-06D3C456.pf": Access is denied.
2004-10-11, 18:08:57, Could not set file for reading on "C:\WINDOWS\Prefetch\ZLUNWISE.EXE-071D246F.pf": Access is denied.
2004-10-11, 18:10:54, An error occurred while scanning file "C:\WINDOWS\system32\config\default": Access is denied.
2004-10-11, 18:10:54, An error occurred while scanning file "C:\WINDOWS\system32\config\default.LOG": Access is denied.
2004-10-11, 18:10:54, An error occurred while scanning file "C:\WINDOWS\system32\config\SAM": Access is denied.
2004-10-11, 18:10:54, An error occurred while scanning file "C:\WINDOWS\system32\config\SAM.LOG": Access is denied.
2004-10-11, 18:10:54, An error occurred while scanning file "C:\WINDOWS\system32\config\SECURITY": Access is denied.
2004-10-11, 18:10:54, An error occurred while scanning file "C:\WINDOWS\system32\config\SECURITY.LOG": Access is denied.
2004-10-11, 18:10:54, An error occurred while scanning file "C:\WINDOWS\system32\config\software": Access is denied.
2004-10-11, 18:10:54, An error occurred while scanning file "C:\WINDOWS\system32\config\software.LOG": Access is denied.
2004-10-11, 18:10:54, An error occurred while scanning file "C:\WINDOWS\system32\config\system": Access is denied.
2004-10-11, 18:10:54, An error occurred while scanning file "C:\WINDOWS\system32\config\system.LOG": Access is denied.
2004-10-11, 18:13:07, An error occurred while scanning file "C:\WINDOWS\Temp\Perflib_Perfdata_6a8.dat": Access is denied.
2004-10-11, 18:13:07, An error occurred while scanning file "C:\WINDOWS\Temp\ZLT0222e.TMP": Access is denied.
2004-10-11, 18:13:13, Running scanner "C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN"...
2004-10-11, 18:36:30, Files Detected:
Copyright (c) 1990 - 2004 Trend Micro Inc.
Report Date : 10/11/2004 18:13:14
VSAPI Engine Version : 7.000-1004
VSCANTM Version : 1.1-1001
Virus Pattern Version : 194 (72847 Patterns) (2004/10/10) (219400)
Command Line: C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\Documents and Settings\hilary\Desktop\New Folder

43479 files have been read.
43479 files have been checked.
31197 files have been scanned.
46486 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 10/11/2004 18:36:30
---------*---------*---------*---------*---------*---------*---------*---------*
2004-10-11, 18:36:30, Files Clean:
Copyright (c) 1990 - 2004 Trend Micro Inc.
Report Date : 10/11/2004 18:13:13
VSAPI Engine Version : 7.000-1004
VSCANTM Version : 1.1-1001
Virus Pattern Version : 194 (72847 Patterns) (2004/10/10) (219400)
Command Line: C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\Documents and Settings\hilary\Desktop\New Folder

43479 files have been read.
43479 files have been checked.
31197 files have been scanned.
46486 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 10/11/2004 18:36:30 23 minutes 15 seconds (1395.76 seconds) has elapsed.

---------*---------*---------*---------*---------*---------*---------*---------*
2004-10-11, 18:36:30, Clean Fail:
Copyright (c) 1990 - 2004 Trend Micro Inc.
Report Date : 10/11/2004 18:13:13
VSAPI Engine Version : 7.000-1004
VSCANTM Version : 1.1-1001
Virus Pattern Version : 194 (72847 Patterns) (2004/10/10) (219400)
Command Line: C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\Documents and Settings\hilary\Desktop\New Folder

43479 files have been read.
43479 files have been checked.
31197 files have been scanned.
46486 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 10/11/2004 18:36:30 23 minutes 15 seconds (1395.76 seconds) has elapsed.

---------*---------*---------*---------*---------*---------*---------*---------*
2004-10-11, 18:36:30, Scanner "C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN" has finished running.


/--------------------------------------------------------------\
| Trend Micro Sysclean Package |
| Copyright 2002, Trend Micro, Inc. |
| http://www.trendmicro.com |
\--------------------------------------------------------------/


2004-10-12, 11:30:16, Auto-clean mode specified.
2004-10-12, 11:30:16, Running scanner "C:\Documents and Settings\hilary\Desktop\New Folder\TSC.BIN"...
2004-10-12, 11:30:26, Scanner "C:\Documents and Settings\hilary\Desktop\New Folder\TSC.BIN" has finished running.
2004-10-12, 11:30:26, TSC Log:

Damage Cleanup Engine (DCE) 3.6(Build 1120)
Windows XP(Build 2600: Service Pack 1)

Start time : Tue Oct 12 2004 11:30:17

Load Damage Cleanup Template (DCT) "C:\Documents and Settings\hilary\Desktop\New Folder\tsc.ptn" (version 432) [success]

Complete time : Tue Oct 12 2004 11:30:26
Execute pattern count(1288), Virus found count(0), Virus clean count(0), Clean failed count(0)

2004-10-12, 11:30:50, Could not set file for reading on "C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp": Access is denied.
2004-10-12, 11:30:57, An error occurred while scanning file "C:\Documents and Settings\hilary\ntuser.dat": Access is denied.
2004-10-12, 11:30:57, An error occurred while scanning file "C:\Documents and Settings\hilary\NTUSER.DAT.LOG": Access is denied.
2004-10-12, 11:32:58, An error occurred while scanning file "C:\Documents and Settings\hilary\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat": Access is denied.
2004-10-12, 11:32:58, An error occurred while scanning file "C:\Documents and Settings\hilary\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG": Access is denied.
2004-10-12, 11:44:19, An error occurred while scanning file "C:\Documents and Settings\LocalService\NTUSER.DAT": Access is denied.
2004-10-12, 11:44:19, An error occurred while scanning file "C:\Documents and Settings\LocalService\ntuser.dat.LOG": Access is denied.
2004-10-12, 11:44:19, An error occurred while scanning file "C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat": Access is denied.
2004-10-12, 11:44:19, An error occurred while scanning file "C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG": Access is denied.
2004-10-12, 11:44:19, An error occurred while scanning file "C:\Documents and Settings\NetworkService\NTUSER.DAT": Access is denied.
2004-10-12, 11:44:19, An error occurred while scanning file "C:\Documents and Settings\NetworkService\ntuser.dat.LOG": Access is denied.
2004-10-12, 11:44:19, An error occurred while scanning file "C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat": Access is denied.
2004-10-12, 11:44:19, An error occurred while scanning file "C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG": Access is denied.
2004-10-12, 11:53:33, An error was detected on "C:\System Volume Information\*.*": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\ACAD.EXE-0481C2CB.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\ACHELP.EXE-1022BD37.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\ACRORD32.EXE-20C463C1.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\AD-AWARE.EXE-2ED3360E.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\ADOBE GAMMA LOADER.EXE-1DBD7BA3.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\AGENT.EXE-10B4BAEA.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGCC32.EXE-2F8E34C8.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGINET.EXE-00383A2D.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGSE.EXE-0ED2F9A5.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGW.EXE-132EA28D.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\AVGW.EXE-1C9CBC8B.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\CALC.EXE-02CD573A.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\CREATECD50.EXE-08EF798E.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\CREATR50.EXE-00C7BDE9.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\CREATR50.EXE-346C4451.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\CWSHREDDER.EXE-2189EBE5.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\DEFRAG.EXE-273F131E.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\DFRGNTFS.EXE-269967DF.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\DIRECTCD.EXE-0A60B47C.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\DLLCOMPARE.EXE-02E51D5C.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\DRMUPGDS.EXE-1E00EA48.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\DRWTSN32.EXE-2B4B52AC.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\DWWIN.EXE-30875ADC.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\GETPOPUPINFO.EXE-22F2D0C9.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\GLB1A2B.EXE-29754C4E.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\GLB1C.TMP-2A8CE8C1.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\HELPSVC.EXE-2878DDA2.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\HIJACKTHIS.EXE-276ED22E.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\HPWGTBX.EXE-2B3E34AA.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\HPZENG08.EXE-17CC2EF1.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\IEDIT.EXE-1181A838.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\INS6.TMP.EXE-144D2922.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\INSTALL.EXE-0EAC8F48.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\IS-OBAJJ.TMP-36AA1D58.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\IS-OEG5E.TMP-2A6BB14C.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\JUSCHED.EXE-30BDEFBB.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\KILLBOX.EXE-2D21C8E3.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\Layout.ini": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\LOGAGENT.EXE-027AF92B.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\LOGON.SCR-151EFAEA.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\MIGRATE.EXE-2371812C.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\MMC.EXE-15688AA5.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\MOZILLA.EXE-015BD8C5.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\MOZILLA.EXE-218B86F4.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\MPSETUP.EXE-22DD3B19.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\MSHEARTS.EXE-0D7FE295.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\MSNMUSIC.EXE-1CF6948F.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\MSOHELP.EXE-079DA48B.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\MSWORKS.EXE-31812CA4.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\MUSICCONVERTER.EXE-0510E7B7.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\NDN01.EXE-10D9C180.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\NOADWARE.EXE-1476A1DC.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\NOADWARE.EXE-39A02959.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\NTVDM.EXE-1A10A423.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\NWIZ.EXE-2D0F9FBC.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\OSA9.EXE-27CD7DB8.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\PINBALL.EXE-1233165F.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RAZORLAME.EXE-2DBC0FF2.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RAZORLAME.EXE-2ED42666.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\REGEDIT.EXE-1B606482.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-15E942E0.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-19AABF21.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-1E5CA7E8.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-1FA30313.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-268BFF96.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-35BB92D4.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-3603C23A.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-3991BA19.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-3B684387.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-3CCC46C7.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-445649BB.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-451FC2C0.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-4825CA9B.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP.EXE-393E66AE.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP_WM.EXE-099E5AEC.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP_WM.EXE-3135CBD6.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP_WM.EXE-38D82D00.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\SNDVOL32.EXE-383480B7.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\SOL.EXE-1C0C14EB.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\SPIDER.EXE-2D998CA6.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\SPYBOTSD.EXE-1344276B.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\SPYSWEEPER.EXE-15D18B6A.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\SSFSETUP1_1765336557.EXE-2E9557BC.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\SYSCLEAN.COM-0E97C985.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\SYSCLEAN.EXE-1A46CBB8.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\TASKMGR.EXE-20256C55.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\TASKPANL.EXE-179224B9.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\TRAYCTL.EXE-3AD6BC1E.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\TSC.BIN-18C04EF7.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\UNREGMP2.EXE-07CACB61.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\UNREGMP2.EXE-37055736.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\USERINIT.EXE-30B18140.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\USSSHREG.EXE-2DC0F479.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\VSCANTM.BIN-1B5576BF.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\VSMON.EXE-1609C098.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WINHLP32.EXE-2C18E975.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WINMINE.EXE-0A3838A4.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WINWORD.EXE-10D55173.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WINZIP32.EXE-335422C1.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WKDETECT.EXE-317B1611.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WKFUD.EXE-03C88000.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WKSSB.EXE-01DCAEEA.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WMPENC.EXE-32AC5B95.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WMPLAYER.EXE-18DDEF9C.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WMPLAYER.EXE-1D2F70DE.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WMPLAYER.EXE-1D2F70E3.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\WUPDMGR.EXE-2F30BEAB.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\ZLCLIENT.EXE-02918DDB.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\ZLCLIENT.EXE-1C550EB2.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\ZLSSETUP_51_033_000.EXE-06D3C456.pf": Access is denied.
2004-10-12, 11:55:46, Could not set file for reading on "C:\WINDOWS\Prefetch\ZLUNWISE.EXE-071D246F.pf": Access is denied.
2004-10-12, 11:56:01, An error occurred while scanning file "C:\WINDOWS\SoftwareDistribution\EventCache\{329833CC-1BA7-4A7E-9DB6-424E5429928C}.bin": Access is denied.
2004-10-12, 11:56:01, An error occurred while scanning file "C:\WINDOWS\SoftwareDistribution\EventCache\{8AB1E37E-F848-4580-B519-C1BD5CDAD193}.bin": Access is denied.
2004-10-12, 11:57:43, An error occurred while scanning file "C:\WINDOWS\system32\config\default": Access is denied.
2004-10-12, 11:57:43, An error occurred while scanning file "C:\WINDOWS\system32\config\default.LOG": Access is denied.
2004-10-12, 11:57:43, An error occurred while scanning file "C:\WINDOWS\system32\config\SAM": Access is denied.
2004-10-12, 11:57:43, An error occurred while scanning file "C:\WINDOWS\system32\config\SAM.LOG": Access is denied.
2004-10-12, 11:57:43, An error occurred while scanning file "C:\WINDOWS\system32\config\SECURITY": Access is denied.
2004-10-12, 11:57:43, An error occurred while scanning file "C:\WINDOWS\system32\config\SECURITY.LOG": Access is denied.
2004-10-12, 11:57:43, An error occurred while scanning file "C:\WINDOWS\system32\config\software": Access is denied.
2004-10-12, 11:57:43, An error occurred while scanning file "C:\WINDOWS\system32\config\software.LOG": Access is denied.
2004-10-12, 11:57:43, An error occurred while scanning file "C:\WINDOWS\system32\config\system": Access is denied.
2004-10-12, 11:57:43, An error occurred while scanning file "C:\WINDOWS\system32\config\system.LOG": Access is denied.
2004-10-12, 11:59:51, An error occurred while scanning file "C:\WINDOWS\Temp\Perflib_Perfdata_4ec.dat": Access is denied.
2004-10-12, 11:59:55, An error occurred while scanning file "C:\WINDOWS\Temp\ZLT04408.TMP": Access is denied.
2004-10-12, 12:00:00, Running scanner "C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN"...
2004-10-12, 12:23:15, Files Detected:
Copyright (c) 1990 - 2004 Trend Micro Inc.
Report Date : 10/12/2004 12:00:03
VSAPI Engine Version : 7.000-1004
VSCANTM Version : 1.1-1001
Virus Pattern Version : 194 (72847 Patterns) (2004/10/10) (219400)
Command Line: C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\Documents and Settings\hilary\Desktop\New Folder

43482 files have been read.
43482 files have been checked.
31196 files have been scanned.
46485 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 10/12/2004 12:23:15
---------*---------*---------*---------*---------*---------*---------*---------*
2004-10-12, 12:23:15, Files Clean:
Copyright (c) 1990 - 2004 Trend Micro Inc.
Report Date : 10/12/2004 12:00:03
VSAPI Engine Version : 7.000-1004
VSCANTM Version : 1.1-1001
Virus Pattern Version : 194 (72847 Patterns) (2004/10/10) (219400)
Command Line: C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\Documents and Settings\hilary\Desktop\New Folder

43482 files have been read.
43482 files have been checked.
31196 files have been scanned.
46485 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 10/12/2004 12:23:15 23 minutes 11 seconds (1391.13 seconds) has elapsed.

---------*---------*---------*---------*---------*---------*---------*---------*
2004-10-12, 12:23:15, Clean Fail:
Copyright (c) 1990 - 2004 Trend Micro Inc.
Report Date : 10/12/2004 12:00:03
VSAPI Engine Version : 7.000-1004
VSCANTM Version : 1.1-1001
Virus Pattern Version : 194 (72847 Patterns) (2004/10/10) (219400)
Command Line: C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\Documents and Settings\hilary\Desktop\New Folder

43482 files have been read.
43482 files have been checked.
31196 files have been scanned.
46485 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 10/12/2004 12:23:15 23 minutes 11 seconds (1391.13 seconds) has elapsed.

---------*---------*---------*---------*---------*---------*---------*---------*
2004-10-12, 12:23:15, Scanner "C:\Documents and Settings\hilary\Desktop\New Folder\VSCANTM.BIN" has finished running.
 
G

GSV Three Minds in a Can

from said:
update:
I uninstalled AVG, ran lavasoft ad-aware which finally found the
bispies, then reinstalled AVG and made new rescue disks, plus put back
on the system restore point. so far, so good.
hilary

That's nice, but for G%d's sake learn to
<snip>
830+ lines of redundant material.

(If you hadn't 'top posted' you might have been more aware of just how
much left-over cr&p there was there).
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top