------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER REPORT Tuesday, July 01, 2008 7:09:54 PM Operating System: Microsoft Windows Vista Home Edition, (Build 6000) Kaspersky Online Scanner version: 5.0.98.0 Kaspersky Anti-Virus database last update: 1/07/2008 Kaspersky Anti-Virus database records: 903012 ------------------------------------------------------------------------------- Scan Settings: Scan using the following antivirus database: extended Scan Archives: true Scan Mail Bases: true Scan Target - My Computer: C:\ D:\ E:\ F:\ G:\ H:\ I:\ Scan Statistics: Total number of scanned objects: 153816 Number of viruses found: 9 Number of infected objects: 27 Number of suspicious objects: 0 Duration of the scan process: 01:02:01 Infected Object Name / Virus Name / Last Action C:\Boot\BCD Object is locked skipped C:\Boot\BCD.LOG Object is locked skipped C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.9.Crwl Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.9.gthr Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSStmp.log Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010001.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010002.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010003.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010004.ci Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010004.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010004.wsb Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010005.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010006.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010007.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010008.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010009.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001000A.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001000B.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010011.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010012.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010013.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010017.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001001A.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001001B.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001001C.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010024.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001003B.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010043.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\INDEX.000 Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\CiPT0000.000 Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\Used0000.000 Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\CiST0000.000 Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SystemIndex.chk1.gthr Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SystemIndex.chk2.gthr Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SystemIndex.Ntfy91.gthr Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\tmp.edb Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc\Ntf68A1.tmp Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc\Ntf68A2.tmp Object is locked skipped C:\ProgramData\Microsoft\Windows Defender\Support\MPLog-11022006-050241.log Object is locked skipped C:\ProgramData\Symantec\SRTSP\LightningSand.CFD Object is locked skipped C:\QooBox\Quarantine\C\Windows\System32\awtsSmkl.dll.vir Infected: Trojan.Win32.Monder.wl skipped C:\QooBox\Quarantine\C\Windows\System32\bpxork.dll.vir Infected: Trojan.Win32.Monderc.gen skipped C:\QooBox\Quarantine\C\Windows\System32\cbXRIcYs.dll.vir Infected: Trojan.Win32.Monder.gen skipped C:\QooBox\Quarantine\C\Windows\System32\ccfxpumx.dll.vir Infected: Trojan.Win32.Monderc.gen skipped C:\QooBox\Quarantine\C\Windows\System32\ddcDsqno.dll.vir Infected: Trojan.Win32.Monderc.gen skipped C:\QooBox\Quarantine\C\Windows\System32\dormwobf.dll.vir Infected: Trojan.Win32.Monder.wg skipped C:\QooBox\Quarantine\C\Windows\System32\hxcyldqp.dll.vir Infected: Trojan.Win32.Monderc.a skipped C:\QooBox\Quarantine\C\Windows\System32\iqluwlhf.dll.vir Infected: Trojan.Win32.Monderc.gen skipped C:\QooBox\Quarantine\C\Windows\System32\jbvompqo.dll.vir Infected: Trojan.Win32.Monderc.a skipped C:\QooBox\Quarantine\C\Windows\System32\jkkJDvTJ.dll.vir Infected: Trojan.Win32.Monder.gen skipped C:\QooBox\Quarantine\C\Windows\System32\kgoipqmg.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.zji skipped C:\QooBox\Quarantine\C\Windows\System32\kyonaujr.dll.vir Infected: Trojan.Win32.Monderc.gen skipped C:\QooBox\Quarantine\C\Windows\System32\ofcbjsle.dll.vir Infected: Trojan.Win32.Monder.wj skipped C:\QooBox\Quarantine\C\Windows\System32\scodcsrq.dll.vir Infected: Trojan.Win32.Monder.wj skipped C:\QooBox\Quarantine\C\Windows\System32\ssQjhffE.dll.vir Infected: Trojan.Win32.Monderc.gen skipped C:\QooBox\Quarantine\C\Windows\System32\tqjghgkf.dll.vir Infected: Trojan.Win32.Monderc.gen skipped C:\QooBox\Quarantine\C\Windows\System32\tuvWnkKe.dll.vir Infected: Trojan.Win32.Monderc.gen skipped C:\QooBox\Quarantine\C\Windows\System32\uqblnksf.dll.vir Infected: Trojan.Win32.Monder.wh skipped C:\QooBox\Quarantine\C\Windows\System32\utfpahue.dll.vir Infected: Trojan.Win32.Monderc.a skipped C:\QooBox\Quarantine\C\Windows\System32\whjisfgj.dll.vir Infected: Trojan.Win32.Monder.wj skipped C:\QooBox\Quarantine\C\Windows\System32\xcdecx.dll.vir Infected: Trojan.Win32.Monderc.gen skipped C:\QooBox\Quarantine\C\Windows\System32\yxanccrb.dll.vir Infected: Trojan.Win32.Monderc.a skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Feeds Cache\index.dat Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Media Player\CurrentDatabase_360.wmdb Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Messenger\ecoseeds@hotmail.com\SharingMetadata\Logs\Dfsr00005.log Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Messenger\ecoseeds@hotmail.com\SharingMetadata\pending.dat Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Messenger\ecoseeds@hotmail.com\SharingMetadata\Working\database_B214_1314_1412_DAE5\dfsr.db Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Messenger\ecoseeds@hotmail.com\SharingMetadata\Working\database_B214_1314_1412_DAE5\fsr.log Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Messenger\ecoseeds@hotmail.com\SharingMetadata\Working\database_B214_1314_1412_DAE5\fsrtmp.log Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Messenger\ecoseeds@hotmail.com\SharingMetadata\Working\database_B214_1314_1412_DAE5\tmp.edb Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1024.db Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012008070120080702\index.dat Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Windows\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DVFFF3I7\play[1].dat Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1 Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2 Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Windows\UsrClass.dat{a6e3a1ea-4149-11dd-9fe7-001e8c77262a}.TM.blf Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Windows\UsrClass.dat{a6e3a1ea-4149-11dd-9fe7-001e8c77262a}.TMContainer00000000000000000001.regtrans-ms Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Windows\UsrClass.dat{a6e3a1ea-4149-11dd-9fe7-001e8c77262a}.TMContainer00000000000000000002.regtrans-ms Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Windows Live Contacts\ecoseeds@hotmail.com\real\members.stg Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Windows Live Contacts\ecoseeds@hotmail.com\shadow\members.stg Object is locked skipped C:\Users\Trupti\AppData\Local\Microsoft\Windows Sidebar\Settings.ini Object is locked skipped C:\Users\Trupti\AppData\Local\Temp\~DF48A6.tmp Object is locked skipped C:\Users\Trupti\AppData\Local\Temp\~DF48B6.tmp Object is locked skipped C:\Users\Trupti\AppData\Local\Temp\~DFA3C7.tmp Object is locked skipped C:\Users\Trupti\AppData\Local\Temp\~DFA3D1.tmp Object is locked skipped C:\Users\Trupti\AppData\Local\Temp\~DFAC56.tmp Object is locked skipped C:\Users\Trupti\AppData\Local\Temp\~DFAC60.tmp Object is locked skipped C:\Users\Trupti\AppData\Local\Temp\~DFFA14.tmp Object is locked skipped C:\Users\Trupti\AppData\Local\Temp\~DFFA1E.tmp Object is locked skipped C:\Users\Trupti\AppData\Roaming\Microsoft\Windows\Cookies\index.dat Object is locked skipped C:\Users\Trupti\Documents\Downloads\spydoc6 Folder.rar/spydoc6 Folder/sdsetup.exe/data0000.cab/IUEGIG~1.EXE Infected: Trojan.Win32.Pakes.den skipped C:\Users\Trupti\Documents\Downloads\spydoc6 Folder.rar/spydoc6 Folder/sdsetup.exe/data0000.cab Infected: Trojan.Win32.Pakes.den skipped C:\Users\Trupti\Documents\Downloads\spydoc6 Folder.rar/spydoc6 Folder/sdsetup.exe Infected: Trojan.Win32.Pakes.den skipped C:\Users\Trupti\Documents\Downloads\spydoc6 Folder.rar RAR: infected - 3 skipped C:\Users\Trupti\NTUSER.DAT Object is locked skipped C:\Users\Trupti\ntuser.dat.LOG1 Object is locked skipped C:\Users\Trupti\ntuser.dat.LOG2 Object is locked skipped C:\Users\Trupti\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf Object is locked skipped C:\Users\Trupti\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms Object is locked skipped C:\Users\Trupti\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000002.regtrans-ms Object is locked skipped C:\Windows\Debug\PASSWD.LOG Object is locked skipped C:\Windows\Debug\sam.log Object is locked skipped C:\Windows\Debug\WIA\wiatrace.log Object is locked skipped C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat Object is locked skipped C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat Object is locked skipped C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WindowsUpdate.log Object is locked skipped C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT Object is locked skipped C:\Windows\ServiceProfiles\LocalService\ntuser.dat.LOG1 Object is locked skipped C:\Windows\ServiceProfiles\LocalService\ntuser.dat.LOG2 Object is locked skipped C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT{3a539869-6a70-11db-887c-d362bd253390}.TM.blf Object is locked skipped C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT{3a539869-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms Object is locked skipped C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT{3a539869-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000002.regtrans-ms Object is locked skipped C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT Object is locked skipped C:\Windows\ServiceProfiles\NetworkService\ntuser.dat.LOG1 Object is locked skipped C:\Windows\ServiceProfiles\NetworkService\ntuser.dat.LOG2 Object is locked skipped C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT{3a539865-6a70-11db-887c-d362bd253390}.TM.blf Object is locked skipped C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT{3a539865-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms Object is locked skipped C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT{3a539865-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000002.regtrans-ms Object is locked skipped C:\Windows\SoftwareDistribution\EventCache\{7A338F7D-6C92-4D8C-8C14-E8A878E97E6E}.bin Object is locked skipped C:\Windows\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 Object is locked skipped C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 Object is locked skipped C:\Windows\System32\catroot2\edb.log Object is locked skipped C:\Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb Object is locked skipped C:\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb Object is locked skipped C:\Windows\System32\config\COMPONENTS Object is locked skipped C:\Windows\System32\config\COMPONENTS.LOG1 Object is locked skipped C:\Windows\System32\config\COMPONENTS.LOG2 Object is locked skipped C:\Windows\System32\config\DEFAULT Object is locked skipped C:\Windows\System32\config\DEFAULT.LOG1 Object is locked skipped C:\Windows\System32\config\DEFAULT.LOG2 Object is locked skipped C:\Windows\System32\config\RegBack\COMPONENTS Object is locked skipped C:\Windows\System32\config\RegBack\DEFAULT Object is locked skipped C:\Windows\System32\config\RegBack\SAM Object is locked skipped C:\Windows\System32\config\RegBack\SECURITY Object is locked skipped C:\Windows\System32\config\RegBack\SOFTWARE Object is locked skipped C:\Windows\System32\config\RegBack\SYSTEM Object is locked skipped C:\Windows\System32\config\SAM Object is locked skipped C:\Windows\System32\config\SAM.LOG1 Object is locked skipped C:\Windows\System32\config\SAM.LOG2 Object is locked skipped C:\Windows\System32\config\SECURITY Object is locked skipped C:\Windows\System32\config\SECURITY.LOG1 Object is locked skipped C:\Windows\System32\config\SECURITY.LOG2 Object is locked skipped C:\Windows\System32\config\SOFTWARE Object is locked skipped C:\Windows\System32\config\SOFTWARE.LOG1 Object is locked skipped C:\Windows\System32\config\SOFTWARE.LOG2 Object is locked skipped C:\Windows\System32\config\SYSTEM Object is locked skipped C:\Windows\System32\config\SYSTEM.LOG1 Object is locked skipped C:\Windows\System32\config\SYSTEM.LOG2 Object is locked skipped C:\Windows\System32\config\TxR\{250834b7-750c-494d-bdc3-da86b6e2101a}.TxR.0.regtrans-ms Object is locked skipped C:\Windows\System32\config\TxR\{250834b7-750c-494d-bdc3-da86b6e2101a}.TxR.1.regtrans-ms Object is locked skipped C:\Windows\System32\config\TxR\{250834b7-750c-494d-bdc3-da86b6e2101a}.TxR.2.regtrans-ms Object is locked skipped C:\Windows\System32\config\TxR\{250834b7-750c-494d-bdc3-da86b6e2101a}.TxR.blf Object is locked skipped C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TM.blf Object is locked skipped C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TMContainer00000000000000000001.regtrans-ms Object is locked skipped C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TMContainer00000000000000000002.regtrans-ms Object is locked skipped C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TMContainer00000000000000000003.regtrans-ms Object is locked skipped C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TMContainer00000000000000000004.regtrans-ms Object is locked skipped C:\Windows\System32\LogFiles\Scm\SCM.EVM Object is locked skipped C:\Windows\System32\LogFiles\WUDF\WUDFTrace.etl Object is locked skipped C:\Windows\System32\Msdtc\KtmRmTm.blf Object is locked skipped C:\Windows\System32\Msdtc\KtmRmTmContainer00000000000000000001 Object is locked skipped C:\Windows\System32\Msdtc\KtmRmTmContainer00000000000000000002 Object is locked skipped C:\Windows\System32\spool\SpoolerETW.etl Object is locked skipped C:\Windows\System32\wbem\Logs\WMITracing.log Object is locked skipped C:\Windows\System32\wbem\Repository\INDEX.BTR Object is locked skipped C:\Windows\System32\wbem\Repository\MAPPING1.MAP Object is locked skipped C:\Windows\System32\wbem\Repository\MAPPING2.MAP Object is locked skipped C:\Windows\System32\wbem\Repository\OBJECTS.DATA Object is locked skipped C:\Windows\System32\WDI\LogFiles\WdiContextLog.etl.002 Object is locked skipped C:\Windows\System32\wfp\wfpdiag.etl Object is locked skipped C:\Windows\System32\winevt\Logs\Application.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\DFS Replication.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\HardwareEvents.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Internet Explorer.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Key Management Service.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Media Center.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-DriverFrameworks-UserMode%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-International%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-LanguagePackSetup%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkAccessProtection%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-ReliabilityAnalysisComponent%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-TaskScheduler%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-WindowsUpdateClient%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\ODiag.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\OSession.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Security.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\System.evtx Object is locked skipped C:\Windows\System32\yqniah.dll Infected: Trojan.Win32.Monderc.gen skipped C:\Windows\Tasks\SCHEDLGU.TXT Object is locked skipped C:\Windows\WindowsUpdate.log Object is locked skipped D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped Scan process completed.