Nod 32 Deep scan analysis... pls have a look

Discussion in 'NOD32 version 2 Forum' started by tony64, Mar 17, 2005.

Thread Status:
Not open for further replies.
  1. tony64

    tony64 Registered Member

    Joined:
    Dec 11, 2004
    Posts:
    98
    Location:
    Milan, Italy
    Hi all,

    I am performing a in depth scan analysis and following is the log.

    I did not realize until today that so few files where effectively checked. Is it normal ? I am using the default settings.

    Appreciate your help

    Cheers

    Tony

    Scan performed at: 17/03/2005 20:21:30
    Scanning Log
    NOD32 version 1.1027 (20050316) NT
    Operating memory - is OK

    date: 17.3.2005 time: 20:21:33
    Scanned disks, directories and files: C:; J:
    C:\pagefile.sys - error opening (file locked) [4]
    C:\Documents and Settings\A.Mangogna\NTUSER.DAT - error opening (file locked) [4]
    C:\Documents and Settings\A.Mangogna\ntuser.dat.LOG - error opening (file locked) [4]
    C:\Documents and Settings\A.Mangogna\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - error opening (file locked) [4]
    C:\Documents and Settings\A.Mangogna\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG - error opening (file locked) [4]
    C:\Documents and Settings\A.Mangogna\Local Settings\Temporary Internet Files\Content.IE5\CL0VSBCF\x[1].chm »CHM »::DataSpace/Storage/MSCompressed/Content - error occured while reading archive
    C:\Documents and Settings\A.Mangogna\Local Settings\Temporary Internet Files\Content.IE5\JI0JZLKP\main[1].chm »CHM »::DataSpace/Storage/MSCompressed/Content - error occured while reading archive
    C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\AlexaRelated.zip »ZIP »related.htm - error - the file is password-protected

    C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit9.zip »ZIP »sbRecovery.ini - error - the file is password-protected
    C:\Documents and Settings\LocalService\NTUSER.DAT - error opening (file locked) [4]
    C:\Documents and Settings\LocalService\ntuser.dat.LOG - error opening (file locked) [4]
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - error opening (file locked) [4]
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG - error opening (file locked) [4]
    C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask »ZIP »arrow1.bmp - error - the file is password-protected

    C:\Program Files\TDS3\Ext.Plug\lanscan.exe »PECompact v1.68 - unpack error
    C:\Program Files\TDS3\Ext.Plug\nbsrvem.exe »PECompact v1.68 - unpack error
    C:\Program Files\TDS3\Ext.Plug\shares.exe »PECompact v1.68 - unpack error
    C:\Program Files\TDS3\Ext.Plug\smtp.exe »PECompact v1.68 - unpack error
    C:\Program Files\TDS3\Ext.Plug\tcpinsp.exe »PECompact v1.68 - unpack error
    C:\Program Files\TDS3\Ext.Sys\execprot.exe »PECompact v1.68 - unpack error
    C:\Program Files\TDS3\Ext.Sys\tcp_list.exe »PECompact v1.68 - unpack error
    C:\WINDOWS\system32\config\default - error opening (file locked) [4]
    C:\WINDOWS\system32\config\default.LOG - error opening (file locked) [4]
    C:\WINDOWS\system32\config\SAM - error opening (file locked) [4]
    C:\WINDOWS\system32\config\SAM.LOG - error opening (file locked) [4]
    C:\WINDOWS\system32\config\SECURITY - error opening (file locked) [4]
    C:\WINDOWS\system32\config\SECURITY.LOG - error opening (file locked) [4]
    C:\WINDOWS\system32\config\software - error opening (file locked) [4]
    C:\WINDOWS\system32\config\software.LOG - error opening (file locked) [4]
    C:\WINDOWS\system32\config\system - error opening (file locked) [4]
    C:\WINDOWS\system32\config\system.LOG - error opening (file locked) [4]
    C:\WINDOWS\system32\drivers\atapi.sys - error opening (file locked) [4]
    C:\WINDOWS\Temp\ZLT00ee3.TMP - error opening (file locked) [4]
    C:\Winfix\WinFix.apm »ZIP »ams_xml_pl.xml - error - the file is password-protected
    C:\Winfix\WinFix.apm »ZIP »ams_xml_temp.xml - error - the file is password-protected
     
    Last edited: Mar 17, 2005
  2. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,721
    Location:
    Texas
    Right click on those entries in the scanner log window and see if you get error 4 (file locked) on all of them.
    That would be the entries in the blue color
     

    Attached Files:

  3. tony64

    tony64 Registered Member

    Joined:
    Dec 11, 2004
    Posts:
    98
    Location:
    Milan, Italy
    Hi Ronjor,

    yes they're locked.

    T.
     
  4. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Hi Tony, you haven't shown us the end of your scan. All that you are seeing [4} are locked swap files. All your other files are being scanned, it is only viruses found and swap files that will be shown.

    Hope this helps...

    Cheers :D
     
    Last edited: Mar 18, 2005
  5. tony64

    tony64 Registered Member

    Joined:
    Dec 11, 2004
    Posts:
    98
    Location:
    Milan, Italy
    Great,

    Thanks for your reply. I thus have no more question to put
    Cheers

    T
     
Thread Status:
Not open for further replies.