Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Nod32log Some Error


  • Please log in to reply
7 replies to this topic

#1 mnd1982

mnd1982

  • Deactivated
  • 21 posts
  • OFFLINE
  •  
  • Local time:01:35 PM

Posted 12 January 2007 - 11:53 AM

here is my nod 32 logs some of the window application files are locked can u please tell me is it safe or I should activate them.I was using a system speed up program which had done this.Please tell me which program should be enabled and how.also please tell me what should be my minimum and maximum memory storage allotment for page file setup.I am using windows xp(sp2), 352MB RAM,AMD Athlon XP2000+ 1.66GHz processor.

Scan performed at: 1/12/2007 14:58:44 PM
Scanning Log
NOD32 version 1916 (20061212) NT
Operating memory - is OK

Date: 12.1.2007 Time: 14:58:53
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:; D:; E:
C:\pagefile.sys - error opening (File locked) [4]
C:\Documents and Settings\LocalService\NTUSER.DAT - error opening (File locked) [4]
C:\Documents and Settings\LocalService\ntuser.dat.LOG - error opening (File locked) [4]
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - error opening (File locked) [4]
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG - error opening (File locked) [4]
C:\Documents and Settings\Manmath\NTUSER.DAT - error opening (File locked) [4]
C:\Documents and Settings\Manmath\NTUSER.DAT.LOG - error opening (File locked) [4]
C:\Documents and Settings\Manmath\Desktop\Universal.rar »RAR »NOD_Universal_Patch.exe - Incorrect file checksum (CRC), the file is probably password protected.
C:\Documents and Settings\Manmath\Desktop\squ\S_I_7.part1.rar »RAR »Squirting_Illustrated_7.wmv - next archive volume not found
C:\Documents and Settings\Manmath\Desktop\unleash creativity\7_Unleash_Creativity.part1.rar »RAR »7 Unleash Creativity\Zygon - Brain Supercharger SuperMemory Unleash Creativity - 02 - Mind Scripting Booster.mp3 - next archive volume not found
C:\Documents and Settings\Manmath\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - error opening (File locked) [4]
C:\Documents and Settings\Manmath\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG - error opening (File locked) [4]
C:\Documents and Settings\Manmath\Local Settings\Temp\IH107D.tmp - error opening (File locked) [4]
C:\Documents and Settings\Manmath\Local Settings\Temp\IH107E.tmp - error opening (File locked) [4]
C:\Documents and Settings\Manmath\Local Settings\Temp\IH1080.tmp - error opening (File locked) [4]
C:\Documents and Settings\Manmath\Local Settings\Temp\IH1154.tmp - error opening (File locked) [4]
C:\Documents and Settings\NetworkService\NTUSER.DAT - error opening (File locked) [4]
C:\Documents and Settings\NetworkService\ntuser.dat.LOG - error opening (File locked) [4]
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - error opening (File locked) [4]
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG - error opening (File locked) [4]
C:\System Volume Information\MountPointManagerRemoteDatabase - error opening (Access denied) [4]
C:\WINDOWS\system32\CatRoot2\edb.log - error opening (File locked) [4]
C:\WINDOWS\system32\CatRoot2\tmp.edb - error opening (File locked) [4]
C:\WINDOWS\system32\config\default - error opening (File locked) [4]
C:\WINDOWS\system32\config\default.LOG - error opening (File locked) [4]
C:\WINDOWS\system32\config\SAM - error opening (File locked) [4]
C:\WINDOWS\system32\config\SAM.LOG - error opening (File locked) [4]
C:\WINDOWS\system32\config\SECURITY - error opening (File locked) [4]
C:\WINDOWS\system32\config\SECURITY.LOG - error opening (File locked) [4]
C:\WINDOWS\system32\config\software - error opening (File locked) [4]
C:\WINDOWS\system32\config\software.LOG - error opening (File locked) [4]
C:\WINDOWS\system32\config\system - error opening (File locked) [4]
C:\WINDOWS\system32\config\system.LOG - error opening (File locked) [4]
D:\System Volume Information\MountPointManagerRemoteDatabase - error opening (Access denied) [4]
E:\Alok Delhi\Mini Mega Mon Digital Camera Driver\MMMDriver.zip »ZIP »Sysfile/BASE4.CAB »CAB »ebd.cab - next archive volume not found
E:\Alok Delhi\Mini Mega Mon Digital Camera Driver\MMMDriver.zip »ZIP »Sysfile/DRIVER11.CAB »CAB »hpscntst.dll - next archive volume not found
E:\Alok Delhi\Mini Mega Mon Digital Camera Driver\MMMDriver.zip »ZIP »Sysfile/PRECOPY1.CAB »CAB »suwin.exe - next archive volume not found
E:\Alok Delhi\Mini Mega Mon Digital Camera Driver\MMMDriver.zip »ZIP »Sysfile/WIN98_21.CAB »CAB »tvxdup.001 - next archive volume not found
E:\Alok Delhi\Mini Mega Mon Digital Camera Driver\MMMDriver\Sysfile\BASE4.CAB »CAB »ebd.cab - next archive volume not found
E:\Alok Delhi\Mini Mega Mon Digital Camera Driver\MMMDriver\Sysfile\DRIVER11.CAB »CAB »hpscntst.dll - next archive volume not found
E:\Alok Delhi\Mini Mega Mon Digital Camera Driver\MMMDriver\Sysfile\PRECOPY1.CAB »CAB »suwin.exe - next archive volume not found
E:\Alok Delhi\Mini Mega Mon Digital Camera Driver\MMMDriver\Sysfile\WIN98_21.CAB »CAB »tvxdup.001 - next archive volume not found
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentins.ui »ZIP »agent_lang_helper.vbs - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentins.ui »ZIP »agentins.ini - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentins.ui »ZIP »agntcons.vbs - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentins.ui »ZIP »agntinst.htm - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentins.ui »ZIP »agntinst.vbs - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentins.ui »ZIP »agntlang.vbs - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentins.ui »ZIP »default.htm - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentins.ui »ZIP »header.vbs - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentins.ui »ZIP »HtmlUtil.vbs - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentins.ui »ZIP »images/bg_left_1x314.gif - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentins.ui »ZIP »images/icon_info_16x16.gif - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentins.ui »ZIP »images/icon_mcafee_61x61.gif - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentins.ui »ZIP »images/icon_progress_checked_13x13.gif - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentins.ui »ZIP »images/icon_progress_hot_13x13.gif - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentins.ui »ZIP »images/icon_progress_unchecked_13x13.gif - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentins.ui »ZIP »InstUtil.vbs - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentins.ui »ZIP »instwiz.css - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentins.ui »ZIP »instxp.css - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentins.ui »ZIP »lang_agnt.vbs - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentins.ui »ZIP »mcccom.lpk - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentins.ui »ZIP »pbar.vbs - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentins.ui »ZIP »setcss.vbs - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentins.ui »ZIP »SubInfoData.vbs - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentins.ui »ZIP »vssver.scc - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »vsoins.ui »ZIP »countries.js - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »vsoins.ui »ZIP »default.htm - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »vsoins.ui »ZIP »header.vbs - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »vsoins.ui »ZIP »HtmlUtil.vbs - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »vsoins.ui »ZIP »images/bg_left_1x314.gif - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »vsoins.ui »ZIP »images/icon_info_16x16.gif - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »vsoins.ui »ZIP »images/icon_mcafee_61x61.gif - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »vsoins.ui »ZIP »images/icon_progress_checked_13x13.gif - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »vsoins.ui »ZIP »images/icon_progress_hot_13x13.gif - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »vsoins.ui »ZIP »images/icon_progress_unchecked_13x13.gif - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »vsoins.ui »ZIP »install.htm - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »vsoins.ui »ZIP »instwiz.css - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »vsoins.ui »ZIP »instxp.css - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »vsoins.ui »ZIP »lang_countries.vbs - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »vsoins.ui »ZIP »lang_vso.vbs - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »vsoins.ui »ZIP »mcccom.lpk - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »vsoins.ui »ZIP »pbar.vbs - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »vsoins.ui »ZIP »setcss.vbs - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »vsoins.ui »ZIP »VsoConst.vbs - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »vsoins.ui »ZIP »vsoins.ini - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »vsoins.ui »ZIP »VSOPropConst.vbs - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentcfg.cab »CAB »screm.ui »ZIP »agntcons.vbs - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentcfg.cab »CAB »screm.ui »ZIP »agntlang.vbs - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentcfg.cab »CAB »screm.ui »ZIP »comctl.lpk - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentcfg.cab »CAB »screm.ui »ZIP »config.ini - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentcfg.cab »CAB »screm.ui »ZIP »pbar.vbs - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentcfg.cab »CAB »screm.ui »ZIP »UnInsStr.vbs - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentcfg.cab »CAB »screm.ui »ZIP »uninst.vbs - error - password-protected file
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentcfg.cab »CAB »screm.ui »ZIP »uninstall.htm - incorrect CRC checksum, the file may be damaged
E:\Softwares\Mcafee VirusScanProfessional.exe »WISE »agentcfg.cab »CAB »screm.ui »ZIP »vssver.scc - error - password-protected file
E:\System Volume Information\MountPointManagerRemoteDatabase - error opening (Access denied) [4]
Number of scanned files: 284688
Number of threats found: 0
Time of completion: 15:51:07 Total scanning time: 3134 sec (00:52:14)

Notes:
[4] File cannot be opened. It may be in use by another application or operating system.
[/size]


BC AdBot (Login to Remove)

 


m

#2 nigglesnush85

nigglesnush85

  • Members
  • 4,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:06:35 PM

Posted 12 January 2007 - 12:57 PM

I use nod32 and have had locked files before.

Firstly, what program did you use to speed up your computer?

The locked files are either pasworded or have been locked by another program. for example spyware doctor locks the hardrive as a result nod can't scan them, it is very unlikely that there is any problem with them, and they should be safe.

I believe that the pagefile can be from 2mb to 4096gb, but should be 3 times what your ram is.
Regards,

Alan.

#3 mnd1982

mnd1982
  • Topic Starter

  • Deactivated
  • 21 posts
  • OFFLINE
  •  
  • Local time:01:35 PM

Posted 12 January 2007 - 02:14 PM

I used the system speed up option present in trojan guarder gold 7.10. I am getting worried because something is killing my ram when I start my pc everything seems fine but gradually the ram decreases after some time it becomes so low that when I minimise my browser the desktop icons starts flickering as if something is refreshing them automatically.Now I have adjusted the page setup option to system managed but I don't know whether the pagefile.sys is working or locked do I have to activate it from registry or the option checked in right click my computer >properties>advanced >performance >setting>advenced>virtualmemory>change and checkking the option system managed is all right .It has alloted minimum 2 MB and maximum 527 MB .Do I have to allot page pagefiling for all my hard drive or only for C?

Edited by mnd1982, 12 January 2007 - 02:18 PM.


#4 nigglesnush85

nigglesnush85

  • Members
  • 4,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:06:35 PM

Posted 12 January 2007 - 06:05 PM

Your pagefile should be fine, It should come into play when you restart windows you only need one pagefile. The page file is an area of the hard disk that is used as ram.

It seems as if it has given you a starting ammount of 2mb, and a max of527mb, this means that it will start with 2mb and gradually work its way up to 527mb. My personal preference would be to set it to custom size and give it a start of 520mb and 527 as maximum.

I would recomend a program called tuneup utilities 2007, sadly it isn't freeware, but it comes with a 30 day trial, It will help you get rid of clutter on the harddrive fix the registry defrag the registry and will help with the memory problems.
Regards,

Alan.

#5 mnd1982

mnd1982
  • Topic Starter

  • Deactivated
  • 21 posts
  • OFFLINE
  •  
  • Local time:01:35 PM

Posted 14 January 2007 - 02:38 AM

Thank you nigglesnush85 for your help .The TuneUp Utilities 2007 is mind blowing that is magic. Can I ask you 5 questions more ? Problems never end

1)Why you told that you will set minimum level of page file set up at 520Mb.How it will help?

2)Today I scanned my computer with trojan remover 6.5.5 and it detected following malware downloader

dh9jkd1q6.exe
dh9jkd1q7.exe
game1.exe
game2.exe
game4.exe
vxg4am1et2.exe

but nod32(it is updated) didn't detect these, so is nod32 alright or should I use other security provider?

3)In Trojan remover there were option like leavening it, renameing it and deleting it I deleted it but I don't believe in these softwares they never delete permanently.
before deleting my system restore was off. How can I make sure these malware are gone if not how can I delete them permanently?

4)My nod32 doesn't start at system startup i couldn't find the set up for setting it to start at system start up without updating can you tell me how can I do it?

5)In TuneUp Utilities 2007 there is a tool which shows all the files those are deleted from your computer even if from recycle bin but it stays in some other folder the path to go to that tool is open TuneUp Utilities 2007 then goto file recovery and destruction >tune up undelete> select the drive and scan.My list is too big I saw there some video files which I had deleted ages ago I will never need it again please tell me how can I delete them because in TuneUp Utilities 2007 there is only recover option .I recovered them to another folder and deleted it using secure delete but it does not delete from that folder.Please help.

#6 nigglesnush85

nigglesnush85

  • Members
  • 4,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:06:35 PM

Posted 14 January 2007 - 07:42 AM

Hello again,

The reason I said that the page file should be 520 mb min, was that when the computer starts it will have those resources to start of with. I noticed a small increace in performance when I did this.

NOD32 is one of the best AV programs I have ever used, having said that, things can get past it as with any security program. I would recomened having a program called cyberhawk, to help nod protect your system. and have another AV program installed (BUT DISABLED) so as you have it for on demand work once a month or so. Just an after thought, have you set nod to scan for everything in AMON IMON etc?

regarding are the trojans gone, they should be, I wouldn't worry about it, if you want to be completely sure you can do some free online scans from places like panda, pccillin or you could download the specific trojan remover from nod32 site, if they have it

If you go to start, run, msconfig, click on the startup tab, can you see an entry called nod32kui? if not, open up tuneup and go to its startup manager and add new entry then search disks and go to c:/programfiles/eset/ nod32kui then ok. that should do the trick.

When you delete a file in windows, it still hans around, the files will remain until a reformat, and sometimes even after that. I have experimented with this before and the undelete feature is very powerfull, you might want to create a folder on the desktop and from now on put the files you don't want in then go to tuneups shredder and delete the folder that way.

Glad to be of help, let me know if there is anything else I can help with
Regards,

Alan.

#7 mnd1982

mnd1982
  • Topic Starter

  • Deactivated
  • 21 posts
  • OFFLINE
  •  
  • Local time:01:35 PM

Posted 14 January 2007 - 03:59 PM

Thank you again for your help and also for suggesting me the name of cyberhawk I am using that also I have loaded avast as alternative av.I have also set the page file as per your suggestion .As per now everything is all right.If some problems appear I will post it again. Can you please suggest me name of some more useful softwares.

#8 nigglesnush85

nigglesnush85

  • Members
  • 4,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:06:35 PM

Posted 15 January 2007 - 06:52 AM

Hello again,

I'm glad to hear that everything is working,
usefull software, I am aware that bleeping computer has a list of free software, unfortunately I can't find it, I will have another look, here is a list of the software I use, or have used that I found very usefull.

For tuning or customising the system.
Tune up
Windows xp manager by yamicsoft
Registry booster
Unlocker.

For security
Nod32
Bit defender
Cyberhawk
Comodo firewall
prevex
ewido

For opening files i use winace
for repairing problems try Advanced windows care
For encryption try axcrypt

Thats all I can think of off hand

Found the list
http://www.bleepingcomputer.com/forums/topic3616.html

Edited by nigglesnush85, 15 January 2007 - 04:09 PM.

Regards,

Alan.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users