Thanks for your reply. The is a shot I took with my phone as windows 10 was in safe mode.
Below is the log file generated by AVG in safe mode. Although it says it has fixed the threat a further scan shows it is still there.For your information I have disabled windows system restore and cleared restore points in case the virus existed there also.
The log file:
AVG AntiVirus command line scanner Copyright (c) 1992 - 2016 AVG Technologies Program version 2016.0.7797, engine 2016.0.4656 Virus Database: Version 4656/13120 2016-09-30 c:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe (1936) Trojan horse Generic38.OZM C:\Documents and Settings\ Locked file. Not scanned. is OK. C:\hiberfil.sys Locked file. Not scanned. is OK. C:\pagefile.sys Locked file. Not scanned. is OK. C:\ProgramData\Intel\IntelSGXPSW\ Locked file. Not scanned. is OK. C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.ASM-WindowsDefault.json Locked file. Not scanned. is OK. C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\TELEMETRY.ASM-WINDOWSSQ.json Locked file. Not scanned. is OK. C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.app.json Locked file. Not scanned. is OK. C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.cert.json Locked file. Not scanned. is OK. C:\ProgramData\Microsoft\Diagnosis\Events_CostDeferred.rbs Locked file. Not scanned. is OK. C:\ProgramData\Microsoft\Diagnosis\Events_Normal.rbs Locked file. Not scanned. is OK. C:\ProgramData\Microsoft\Diagnosis\Events_NormalCritical.rbs Locked file. Not scanned. is OK. C:\ProgramData\Microsoft\Diagnosis\Events_Realtime.rbs Locked file. Not scanned. is OK. C:\ProgramData\Microsoft\Diagnosis\parse.dat Locked file. Not scanned. is OK. C:\ProgramData\Microsoft\Windows\SystemData\ Locked file. Not scanned. is OK. C:\ProgramData\Microsoft\Windows Defender\Scans\History\CacheManager\0447D584-663C-4724-9DE7-97E6AC973982-0.bin Locked file. Not scanned. is OK. C:\swapfile.sys Locked file. Not scanned. is OK. C:\System Volume Information\ Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Avg\av16\temp\avg-43ad0a5e-4186-470b-b98c-bb10e0228a2e.tmp Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Microsoft\Windows\INetCache\Content.IE5\ Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Microsoft\Windows\Notifications\WPNPRMRY.tmp Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Microsoft\Windows\UsrClass.dat Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1 Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2 Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Microsoft\Windows\WebCache\V01.log Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.jfm Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Microsoft\Windows\WebCacheLock.dat Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat.LOG1 Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat.LOG2 Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat.LOG1 Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat.LOG2 Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\TileDataLayer\Database\EDB.log Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\TileDataLayer\Database\vedatamodel.edb Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\TileDataLayer\Database\vedatamodel.jfm Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\NTUSER.DAT Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\ntuser.dat.LOG1 Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\ntuser.dat.LOG2 Locked file. Not scanned. is OK. C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\ Locked file. Not scanned. is OK. C:\Users\Default.migrated\AppData\Local\Microsoft\Windows\Temporary Internet Files\ Locked file. Not scanned. is OK. C:\Users\Default.migrated\Documents\My Music\ Locked file. Not scanned. is OK. C:\Users\Default.migrated\Documents\My Pictures\ Locked file. Not scanned. is OK. C:\Users\Default.migrated\Documents\My Videos\ Locked file. Not scanned. is OK. C:\Users\Public\Documents\My Music\ Locked file. Not scanned. is OK. C:\Users\Public\Documents\My Pictures\ Locked file. Not scanned. is OK. C:\Users\Public\Documents\My Videos\ Locked file. Not scanned. is OK. C:\Windows\Resources\Themes\aero\VSCache\Aero.msstyles_2057_144_05.mss Locked file. Not scanned. is OK. C:\Windows\Resources\Themes\aero\VSCache\Aero.msstyles_2057_96_01.mss Locked file. Not scanned. is OK. C:\Windows\Resources\Themes\aero\VSCache\Aero.msstyles_2057_96_05.mss Locked file. Not scanned. is OK. C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc\ Locked file. Not scanned. is OK. C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT Locked file. Not scanned. is OK. C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG1 Locked file. Not scanned. is OK. C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG2 Locked file. Not scanned. is OK. C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT Locked file. Not scanned. is OK. C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG1 Locked file. Not scanned. is OK. C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG2 Locked file. Not scanned. is OK. C:\Windows\System32\config\BBI Locked file. Not scanned. is OK. C:\Windows\System32\config\BBI.LOG1 Locked file. Not scanned. is OK. C:\Windows\System32\config\BBI.LOG2 Locked file. Not scanned. is OK. C:\Windows\System32\config\DEFAULT Locked file. Not scanned. is OK. C:\Windows\System32\config\DEFAULT.LOG1 Locked file. Not scanned. is OK. C:\Windows\System32\config\DEFAULT.LOG2 Locked file. Not scanned. is OK. C:\Windows\System32\config\RegBack\DEFAULT Locked file. Not scanned. is OK. C:\Windows\System32\config\RegBack\SAM Locked file. Not scanned. is OK. C:\Windows\System32\config\RegBack\SECURITY Locked file. Not scanned. is OK. C:\Windows\System32\config\RegBack\SOFTWARE Locked file. Not scanned. is OK. C:\Windows\System32\config\RegBack\SYSTEM Locked file. Not scanned. is OK. C:\Windows\System32\config\SAM Locked file. Not scanned. is OK. C:\Windows\System32\config\SAM.LOG1 Locked file. Not scanned. is OK. C:\Windows\System32\config\SAM.LOG2 Locked file. Not scanned. is OK. C:\Windows\System32\config\SECURITY Locked file. Not scanned. is OK. C:\Windows\System32\config\SECURITY.LOG1 Locked file. Not scanned. is OK. C:\Windows\System32\config\SECURITY.LOG2 Locked file. Not scanned. is OK. C:\Windows\System32\config\SOFTWARE Locked file. Not scanned. is OK. C:\Windows\System32\config\SOFTWARE.LOG1 Locked file. Not scanned. is OK. C:\Windows\System32\config\SOFTWARE.LOG2 Locked file. Not scanned. is OK. C:\Windows\System32\config\SYSTEM Locked file. Not scanned. is OK. C:\Windows\System32\config\SYSTEM.LOG1 Locked file. Not scanned. is OK. C:\Windows\System32\config\SYSTEM.LOG2 Locked file. Not scanned. is OK. C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5\ Locked file. Not scanned. is OK. C:\Windows\System32\LogFiles\WMI\RtBackup\ Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\DownloadedScenarios\WINDOWS.DIAGNOSTICS.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\DownloadedScenarios\WINDOWS.PERFTRACKESCALATIONS.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\DownloadedScenarios\WINDOWS.PERFTRACKPOINTDATA.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\DownloadedScenarios\WINDOWS.SIUF.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\DownloadedScenarios\WINDOWS.UIF.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\DownloadedSettings\cfc.flights.json Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.ASM-WindowsDefault.json Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.app.json Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\events00.rbs Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\events01.rbs Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\events10.rbs Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\events11.rbs Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\parse.dat Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\084c17b6-bc57-45ad-b172-3071389209a5_show.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\084c17b6-bc57-45ad-b172-3071389209a5_withdraw.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\234922da-c16b-48ba-98fc-6779fbe41560_show.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\234922da-c16b-48ba-98fc-6779fbe41560_withdraw.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\3ce4691c-ad94-48a8-bdde-e90dd8c9ed82_show.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\3ce4691c-ad94-48a8-bdde-e90dd8c9ed82_withdraw.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\4a510374-fc67-4aa4-821a-0976e382e33d_show.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\4a510374-fc67-4aa4-821a-0976e382e33d_withdraw.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\5b39b326-287f-494a-9156-60dfd950f816_show.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\5b39b326-287f-494a-9156-60dfd950f816_withdraw.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\bee2f872-6e0a-4cf6-96b2-941cc330b269_show.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\bee2f872-6e0a-4cf6-96b2-941cc330b269_withdraw.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\c1f980d0-1f88-4c28-9576-4a05991e3569_show.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\c1f980d0-1f88-4c28-9576-4a05991e3569_withdraw.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Windows\SystemData\ Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Windows Defender\Scans\History\CacheManager\MpScanCache-0.bin Locked file. Not scanned. is OK. C:\Windows.old\Users\Alexander Messenger\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\ Locked file. Not scanned. is OK. C:\Windows.old\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\ Locked file. Not scanned. is OK. C:\Windows.old\Users\Default.migrated\AppData\Local\Microsoft\Windows\Temporary Internet Files\ Locked file. Not scanned. is OK. C:\Windows.old\WINDOWS\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5\ Locked file. Not scanned. is OK. C:\Windows.old\WINDOWS\System32\LogFiles\WMI\RtBackup\ Locked file. Not scanned. is OK. D:\System Volume Information\ Locked file. Not scanned. is OK. ------------------------------------------------------------ Test started: 30.9.2016 21:09:46 Duration of test: 9 minute(s) 30 second(s) ------------------------------------------------------------ Objects scanned : 496611 Found infections : 118 Found high severity : 1 Found med severity : 0 Found info severity : 117 Fixed high severity : 1 Fixed med severity : 0 Fixed info severity : 0 ------------------------------------------------------------
AVG Internet Security
Windows 10 Home
Whole computer scan showing trojan, multiple instances in processes
Won't remove threats
Tried scan in safe mode - still couldn't remove threats showed this as the virus:
windows/SystemApps/microsoft.windows.cortana_cw5n1h2txyewy/SearchUI.exe (1936) Trojan horse Generic38.OZM
Is this actually a virus do you think or a false positive?
Has anyone got any ideas how to remove threat if it is one, I can't find anything on this on google searches.
Appreciate any help - thanks
Windows 10 Home
Whole computer scan showing trojan, multiple instances in processes
Won't remove threats
Tried scan in safe mode - still couldn't remove threats showed this as the virus:
windows/SystemApps/microsoft.windows.cortana_cw5n1h2txyewy/SearchUI.exe (1936) Trojan horse Generic38.OZM
Is this actually a virus do you think or a false positive?
Has anyone got any ideas how to remove threat if it is one, I can't find anything on this on google searches.
Appreciate any help - thanks
Hello Nigel,
Thank you for the information. To resolve the issue we would request you to reinstall your product and try to scan once. If the issue still persist we would request you to let us know , so that we can escalate this issue to our developers and try to resolve at the earliest.
We would request you to remove AVG program with including previous installed program traces of (AVG 2015 or AVG 2014)from your system using AVG Remover tool and then try to reinstall AVG Internet Security.
Note: If you have installed any other conflicting programs like AVAST,NORTON, McAfee or KASPERSKY means please try to uninstall it.
Once you have uninstalled from your system,try to follow the steps which mentioned below.
Remover and Download:
1) To download AVG remover tool, please click on this link: http://aa-download.avg.com/filedir/util/AVG_Remover.exe
2) Run the downloaded file and follow the onscreen instructions.
Thank you for the information. To resolve the issue we would request you to reinstall your product and try to scan once. If the issue still persist we would request you to let us know , so that we can escalate this issue to our developers and try to resolve at the earliest.
We would request you to remove AVG program with including previous installed program traces of (AVG 2015 or AVG 2014)from your system using AVG Remover tool and then try to reinstall AVG Internet Security.
Note: If you have installed any other conflicting programs like AVAST,NORTON, McAfee or KASPERSKY means please try to uninstall it.
Once you have uninstalled from your system,try to follow the steps which mentioned below.
Remover and Download:
1) To download AVG remover tool, please click on this link: http://aa-download.avg.com/filedir/util/AVG_Remover.exe
2) Run the downloaded file and follow the onscreen instructions.
- Restart your PC when the restart option is displayed on the remover tool screen.
NOTE: Once you have logged into your PC after the restart, please go to C:\ drive and delete the "AVG REMOVER" folder manually.
To download the AVG Internet Security unlimited , please click on this link:http://files-download.avg.com/inst/mp/AVG_Protection_806.exe .
Please feel free to contact us if you need any assistance.
Thank you.
Hello Nigel,
We regret for the inconvenience caused. Could you please send the screenshot of your error Threat so that we can assist further? Please click on the following link http://support.avg.com/SupportArticleView?urlname=How-to-create-a-screenshot to send the screen shot. Thank you
We regret for the inconvenience caused. Could you please send the screenshot of your error Threat so that we can assist further? Please click on the following link http://support.avg.com/SupportArticleView?urlname=How-to-create-a-screenshot to send the screen shot. Thank you
Thanks for your reply. The is a shot I took with my phone as windows 10 was in safe mode.
Below is the log file generated by AVG in safe mode. Although it says it has fixed the threat a further scan shows it is still there.For your information I have disabled windows system restore and cleared restore points in case the virus existed there also.
The log file:
AVG AntiVirus command line scanner Copyright (c) 1992 - 2016 AVG Technologies Program version 2016.0.7797, engine 2016.0.4656 Virus Database: Version 4656/13120 2016-09-30 c:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe (1936) Trojan horse Generic38.OZM C:\Documents and Settings\ Locked file. Not scanned. is OK. C:\hiberfil.sys Locked file. Not scanned. is OK. C:\pagefile.sys Locked file. Not scanned. is OK. C:\ProgramData\Intel\IntelSGXPSW\ Locked file. Not scanned. is OK. C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.ASM-WindowsDefault.json Locked file. Not scanned. is OK. C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\TELEMETRY.ASM-WINDOWSSQ.json Locked file. Not scanned. is OK. C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.app.json Locked file. Not scanned. is OK. C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.cert.json Locked file. Not scanned. is OK. C:\ProgramData\Microsoft\Diagnosis\Events_CostDeferred.rbs Locked file. Not scanned. is OK. C:\ProgramData\Microsoft\Diagnosis\Events_Normal.rbs Locked file. Not scanned. is OK. C:\ProgramData\Microsoft\Diagnosis\Events_NormalCritical.rbs Locked file. Not scanned. is OK. C:\ProgramData\Microsoft\Diagnosis\Events_Realtime.rbs Locked file. Not scanned. is OK. C:\ProgramData\Microsoft\Diagnosis\parse.dat Locked file. Not scanned. is OK. C:\ProgramData\Microsoft\Windows\SystemData\ Locked file. Not scanned. is OK. C:\ProgramData\Microsoft\Windows Defender\Scans\History\CacheManager\0447D584-663C-4724-9DE7-97E6AC973982-0.bin Locked file. Not scanned. is OK. C:\swapfile.sys Locked file. Not scanned. is OK. C:\System Volume Information\ Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Avg\av16\temp\avg-43ad0a5e-4186-470b-b98c-bb10e0228a2e.tmp Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Microsoft\Windows\INetCache\Content.IE5\ Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Microsoft\Windows\Notifications\WPNPRMRY.tmp Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Microsoft\Windows\UsrClass.dat Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1 Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2 Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Microsoft\Windows\WebCache\V01.log Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.jfm Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Microsoft\Windows\WebCacheLock.dat Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat.LOG1 Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat.LOG2 Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat.LOG1 Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat.LOG2 Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\TileDataLayer\Database\EDB.log Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\TileDataLayer\Database\vedatamodel.edb Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\AppData\Local\TileDataLayer\Database\vedatamodel.jfm Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\NTUSER.DAT Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\ntuser.dat.LOG1 Locked file. Not scanned. is OK. C:\Users\Alexander Messenger\ntuser.dat.LOG2 Locked file. Not scanned. is OK. C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\ Locked file. Not scanned. is OK. C:\Users\Default.migrated\AppData\Local\Microsoft\Windows\Temporary Internet Files\ Locked file. Not scanned. is OK. C:\Users\Default.migrated\Documents\My Music\ Locked file. Not scanned. is OK. C:\Users\Default.migrated\Documents\My Pictures\ Locked file. Not scanned. is OK. C:\Users\Default.migrated\Documents\My Videos\ Locked file. Not scanned. is OK. C:\Users\Public\Documents\My Music\ Locked file. Not scanned. is OK. C:\Users\Public\Documents\My Pictures\ Locked file. Not scanned. is OK. C:\Users\Public\Documents\My Videos\ Locked file. Not scanned. is OK. C:\Windows\Resources\Themes\aero\VSCache\Aero.msstyles_2057_144_05.mss Locked file. Not scanned. is OK. C:\Windows\Resources\Themes\aero\VSCache\Aero.msstyles_2057_96_01.mss Locked file. Not scanned. is OK. C:\Windows\Resources\Themes\aero\VSCache\Aero.msstyles_2057_96_05.mss Locked file. Not scanned. is OK. C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc\ Locked file. Not scanned. is OK. C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT Locked file. Not scanned. is OK. C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG1 Locked file. Not scanned. is OK. C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG2 Locked file. Not scanned. is OK. C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT Locked file. Not scanned. is OK. C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG1 Locked file. Not scanned. is OK. C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG2 Locked file. Not scanned. is OK. C:\Windows\System32\config\BBI Locked file. Not scanned. is OK. C:\Windows\System32\config\BBI.LOG1 Locked file. Not scanned. is OK. C:\Windows\System32\config\BBI.LOG2 Locked file. Not scanned. is OK. C:\Windows\System32\config\DEFAULT Locked file. Not scanned. is OK. C:\Windows\System32\config\DEFAULT.LOG1 Locked file. Not scanned. is OK. C:\Windows\System32\config\DEFAULT.LOG2 Locked file. Not scanned. is OK. C:\Windows\System32\config\RegBack\DEFAULT Locked file. Not scanned. is OK. C:\Windows\System32\config\RegBack\SAM Locked file. Not scanned. is OK. C:\Windows\System32\config\RegBack\SECURITY Locked file. Not scanned. is OK. C:\Windows\System32\config\RegBack\SOFTWARE Locked file. Not scanned. is OK. C:\Windows\System32\config\RegBack\SYSTEM Locked file. Not scanned. is OK. C:\Windows\System32\config\SAM Locked file. Not scanned. is OK. C:\Windows\System32\config\SAM.LOG1 Locked file. Not scanned. is OK. C:\Windows\System32\config\SAM.LOG2 Locked file. Not scanned. is OK. C:\Windows\System32\config\SECURITY Locked file. Not scanned. is OK. C:\Windows\System32\config\SECURITY.LOG1 Locked file. Not scanned. is OK. C:\Windows\System32\config\SECURITY.LOG2 Locked file. Not scanned. is OK. C:\Windows\System32\config\SOFTWARE Locked file. Not scanned. is OK. C:\Windows\System32\config\SOFTWARE.LOG1 Locked file. Not scanned. is OK. C:\Windows\System32\config\SOFTWARE.LOG2 Locked file. Not scanned. is OK. C:\Windows\System32\config\SYSTEM Locked file. Not scanned. is OK. C:\Windows\System32\config\SYSTEM.LOG1 Locked file. Not scanned. is OK. C:\Windows\System32\config\SYSTEM.LOG2 Locked file. Not scanned. is OK. C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5\ Locked file. Not scanned. is OK. C:\Windows\System32\LogFiles\WMI\RtBackup\ Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\DownloadedScenarios\WINDOWS.DIAGNOSTICS.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\DownloadedScenarios\WINDOWS.PERFTRACKESCALATIONS.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\DownloadedScenarios\WINDOWS.PERFTRACKPOINTDATA.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\DownloadedScenarios\WINDOWS.SIUF.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\DownloadedScenarios\WINDOWS.UIF.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\DownloadedSettings\cfc.flights.json Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\DownloadedSettings\telemetry.ASM-WindowsDefault.json Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.app.json Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\events00.rbs Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\events01.rbs Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\events10.rbs Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\events11.rbs Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\parse.dat Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\084c17b6-bc57-45ad-b172-3071389209a5_show.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\084c17b6-bc57-45ad-b172-3071389209a5_withdraw.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\234922da-c16b-48ba-98fc-6779fbe41560_show.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\234922da-c16b-48ba-98fc-6779fbe41560_withdraw.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\3ce4691c-ad94-48a8-bdde-e90dd8c9ed82_show.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\3ce4691c-ad94-48a8-bdde-e90dd8c9ed82_withdraw.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\4a510374-fc67-4aa4-821a-0976e382e33d_show.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\4a510374-fc67-4aa4-821a-0976e382e33d_withdraw.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\5b39b326-287f-494a-9156-60dfd950f816_show.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\5b39b326-287f-494a-9156-60dfd950f816_withdraw.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\bee2f872-6e0a-4cf6-96b2-941cc330b269_show.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\bee2f872-6e0a-4cf6-96b2-941cc330b269_withdraw.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\c1f980d0-1f88-4c28-9576-4a05991e3569_show.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Diagnosis\SoftLanding\c1f980d0-1f88-4c28-9576-4a05991e3569_withdraw.xml Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Windows\SystemData\ Locked file. Not scanned. is OK. C:\Windows.old\ProgramData\Microsoft\Windows Defender\Scans\History\CacheManager\MpScanCache-0.bin Locked file. Not scanned. is OK. C:\Windows.old\Users\Alexander Messenger\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\ Locked file. Not scanned. is OK. C:\Windows.old\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\ Locked file. Not scanned. is OK. C:\Windows.old\Users\Default.migrated\AppData\Local\Microsoft\Windows\Temporary Internet Files\ Locked file. Not scanned. is OK. C:\Windows.old\WINDOWS\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5\ Locked file. Not scanned. is OK. C:\Windows.old\WINDOWS\System32\LogFiles\WMI\RtBackup\ Locked file. Not scanned. is OK. D:\System Volume Information\ Locked file. Not scanned. is OK. ------------------------------------------------------------ Test started: 30.9.2016 21:09:46 Duration of test: 9 minute(s) 30 second(s) ------------------------------------------------------------ Objects scanned : 496611 Found infections : 118 Found high severity : 1 Found med severity : 0 Found info severity : 117 Fixed high severity : 1 Fixed med severity : 0 Fixed info severity : 0 ------------------------------------------------------------