System Error! [HJT log]

new report

hi Geri - I followed your instructions and have posted the log below.

thanks

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Thursday, February 28, 2008 3:27:29 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 28/02/2008
Kaspersky Anti-Virus database records: 585361
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\
E:\

Scan Statistics:
Total number of scanned objects: 117456
Number of viruses found: 5
Number of infected objects: 27
Number of suspicious objects: 0
Duration of the scan process: 02:29:45

Infected Object Name / Virus Name / Last Action
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\DEFAULT Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped
C:\WINDOWS\system32\config\SYSTEM Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\Temp\ib23 Object is locked skipped
C:\WINDOWS\Temp\ib24 Object is locked skipped
C:\WINDOWS\Temp\ib25 Object is locked skipped
C:\WINDOWS\Temp\Perflib_Perfdata_8b8.dat Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\2008-02-28_Log.ALUSchedulerSvc.LiveUpdate Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\Confid.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\Content.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\WebHist.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\Privacy.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\Restrict.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\HPPHomePageActivity.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\HPPAppActivity.log Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\David\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\David\Local Settings\Temp\Perflib_Perfdata_ef8.dat Object is locked skipped
C:\Documents and Settings\David\Local Settings\Temp\~DF6DBB.tmp Object is locked skipped
C:\Documents and Settings\David\Local Settings\Temp\~WRF0000.tmp Object is locked skipped
C:\Documents and Settings\David\Local Settings\Temp\~DFAB63.tmp Object is locked skipped
C:\Documents and Settings\David\Local Settings\Temp\~WRD0001.doc Object is locked skipped
C:\Documents and Settings\David\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\David\Local Settings\History\History.IE5\MSHist012008022820080229\index.dat Object is locked skipped
C:\Documents and Settings\David\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\David\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\David\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\David\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\David\Local Settings\Application Data\Microsoft\Outlook\Outlook1.pst/Personal Folders/Deleted Items/23 Jan 2007 04:37 from mancyostcard/postcard.zip/postcard.exe Infected: Email-Worm.Win32.Warezov.kr skipped
C:\Documents and Settings\David\Local Settings\Application Data\Microsoft\Outlook\Outlook1.pst/Personal Folders/Deleted Items/23 Jan 2007 04:37 from mancyostcard/postcard.zip Infected: Email-Worm.Win32.Warezov.kr skipped
C:\Documents and Settings\David\Local Settings\Application Data\Microsoft\Outlook\Outlook1.pst Mail MS Mail: infected - 2 skipped
C:\Documents and Settings\David\Local Settings\Application Data\Microsoft\Outlook\Outlook2.pst/Personal Folders/Deleted Items/12 Apr 2007 18:12 from Abuse Team Robot:[Norton AntiSpam] Spywar/patch-8385.zip Infected: Email-Worm.Win32.Zhelatin.ct skipped
C:\Documents and Settings\David\Local Settings\Application Data\Microsoft\Outlook\Outlook2.pst/Personal Folders/Deleted Items/19 Apr 2007 05:18 from serv@phazen.net:Mail server report./Update-KB9562-x86.zip/Update-KB9562-x86.exe Infected: Email-Worm.Win32.Warezov.pk skipped
C:\Documents and Settings\David\Local Settings\Application Data\Microsoft\Outlook\Outlook2.pst/Personal Folders/Deleted Items/19 Apr 2007 05:18 from serv@phazen.net:Mail server report./Update-KB9562-x86.zip Infected: Email-Worm.Win32.Warezov.pk skipped
C:\Documents and Settings\David\Local Settings\Application Data\Microsoft\Outlook\Outlook2.pst/Personal Folders/Deleted Items/19 Apr 2007 06:21 from serv@midmich.net:Mail server report./Update-KB2328-x86.zip/Update-KB2328-x86.exe Infected: Email-Worm.Win32.Warezov.pk skipped
C:\Documents and Settings\David\Local Settings\Application Data\Microsoft\Outlook\Outlook2.pst/Personal Folders/Deleted Items/19 Apr 2007 06:21 from serv@midmich.net:Mail server report./Update-KB2328-x86.zip Infected: Email-Worm.Win32.Warezov.pk skipped
C:\Documents and Settings\David\Local Settings\Application Data\Microsoft\Outlook\Outlook2.pst/Personal Folders/Deleted Items/19 Apr 2007 06:21 from secur@fcradio.net:Mail server report./Update-KB5250-x86.zip/Update-KB5250-x86.exe Infected: Email-Worm.Win32.Warezov.pk skipped
C:\Documents and Settings\David\Local Settings\Application Data\Microsoft\Outlook\Outlook2.pst/Personal Folders/Deleted Items/19 Apr 2007 06:21 from secur@fcradio.net:Mail server report./Update-KB5250-x86.zip Infected: Email-Worm.Win32.Warezov.pk skipped
C:\Documents and Settings\David\Local Settings\Application Data\Microsoft\Outlook\Outlook2.pst/Personal Folders/Deleted Items/19 Apr 2007 06:23 from sec@niet.com:Mail server report./Update-KB2328-x86.zip/Update-KB2328-x86.exe Infected: Email-Worm.Win32.Warezov.pk skipped
C:\Documents and Settings\David\Local Settings\Application Data\Microsoft\Outlook\Outlook2.pst/Personal Folders/Deleted Items/19 Apr 2007 06:23 from sec@niet.com:Mail server report./Update-KB2328-x86.zip Infected: Email-Worm.Win32.Warezov.pk skipped
C:\Documents and Settings\David\Local Settings\Application Data\Microsoft\Outlook\Outlook2.pst/Personal Folders/Deleted Items/19 Apr 2007 06:32 from sec@fcradio.net:Mail server report./Update-KB9562-x86.zip/Update-KB9562-x86.exe Infected: Email-Worm.Win32.Warezov.pk skipped
C:\Documents and Settings\David\Local Settings\Application Data\Microsoft\Outlook\Outlook2.pst/Personal Folders/Deleted Items/19 Apr 2007 06:32 from sec@fcradio.net:Mail server report./Update-KB9562-x86.zip Infected: Email-Worm.Win32.Warezov.pk skipped
C:\Documents and Settings\David\Local Settings\Application Data\Microsoft\Outlook\Outlook2.pst/Personal Folders/Deleted Items/20 Apr 2007 03:20 from secur@phazen.net:Mail server report./Update-KB4718-x86.zip/Update-KB4718-x86.exe Infected: Email-Worm.Win32.Warezov.pk skipped
C:\Documents and Settings\David\Local Settings\Application Data\Microsoft\Outlook\Outlook2.pst/Personal Folders/Deleted Items/20 Apr 2007 03:20 from secur@phazen.net:Mail server report./Update-KB4718-x86.zip Infected: Email-Worm.Win32.Warezov.pk skipped
C:\Documents and Settings\David\Local Settings\Application Data\Microsoft\Outlook\Outlook2.pst Mail MS Mail: infected - 13 skipped
C:\Documents and Settings\David\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\David\Desktop\Qidos jobs.xls Object is locked skipped
C:\Documents and Settings\David\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\David\Application Data\Symantec\PendingAlertsQueue.log Object is locked skipped
C:\Documents and Settings\David\ntuser.dat Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\EENGINE\EPERSIST.DAT Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcrst.dll Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\AntiSpam\Log\Spam.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\SPPolicy.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\SPStart.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\SPStop.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBValid.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBConfig.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBRefr.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBNotify.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetCfg.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetCfg2.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetUsr.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBStHash.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetLoc.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetDev.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBDetect.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBDebug.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBStMSI.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSMReg.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSMRSt.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSMNot.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDSYS.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDFW.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDCON.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDALRT.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDIDS.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDDBG.log Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\config\configuration\org.eclipse.core.runtime\.manager\.tmp42538.instance Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\ibdata1 Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\ib_logfile0 Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\ib_logfile1 Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\versioncue\bhlabel.ibd Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\versioncue\bhlabeltoversion.ibd Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\versioncue\bhmessage.ibd Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\versioncue\bhpqentry.ibd Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\versioncue\bhpublishlog.ibd Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\versioncue\bhpublishserver.ibd Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\versioncue\bhpublishstateitem.ibd Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\versioncue\bhresult.ibd Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\versioncue\bhreview.ibd Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\versioncue\bhreviewcomment.ibd Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\versioncue\bhrole.ibd Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\versioncue\bhschemaversion.ibd Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\versioncue\bhsequence.ibd Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\versioncue\bhserverglobals.ibd Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\versioncue\bhsettings.ibd Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\versioncue\bhsettingssection.ibd Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\versioncue\bhthumbnail.ibd Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\versioncue\bhuser.ibd Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\versioncue\bhuserrole.ibd Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\versioncue\bhxmpmetadata.ibd Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\versioncue\bhxmpproperty.ibd Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\versioncue\bhassetversioncacheitem.ibd Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\versioncue\bhassetcacheitem.ibd Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\data\versioncue\BHASSET.IBD Object is locked skipped
C:\Program Files\Adobe\Adobe Version Cue CS2\logs\VersionCue.log Object is locked skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Savrt\0400NAV~.TMP Object is locked skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Savrt\0335NAV~.TMP Object is locked skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\AVVirus.log Object is locked skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\AVApp.log Object is locked skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\AVError.log Object is locked skipped
C:\System Volume Information\_restore{2D1D3E7F-7619-4B57-9717-9F90924ECB41}\RP2\A0003063.exe/data0008 Infected: not-a-virus:FraudTool.Win32.IeDefender.bq skipped
C:\System Volume Information\_restore{2D1D3E7F-7619-4B57-9717-9F90924ECB41}\RP2\A0003063.exe NSIS: infected - 1 skipped
C:\System Volume Information\_restore{2D1D3E7F-7619-4B57-9717-9F90924ECB41}\RP2\A0003073.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\System Volume Information\_restore{2D1D3E7F-7619-4B57-9717-9F90924ECB41}\RP3\A0006413.exe/data.rar/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\System Volume Information\_restore{2D1D3E7F-7619-4B57-9717-9F90924ECB41}\RP3\A0006413.exe/data.rar Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\System Volume Information\_restore{2D1D3E7F-7619-4B57-9717-9F90924ECB41}\RP3\A0006413.exe RarSFX: infected - 2 skipped
C:\System Volume Information\_restore{2D1D3E7F-7619-4B57-9717-9F90924ECB41}\RP3\A0006420.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\System Volume Information\_restore{2D1D3E7F-7619-4B57-9717-9F90924ECB41}\RP3\change.log Object is locked skipped
C:\Recycled\NPROTECT\NPROTECT.LOG Object is locked skipped
C:\_OTMoveIt\MovedFiles\02282008_125256\Documents and Settings\David\Outlook.pst/Personal Folders/Deleted Items/23 Jan 2007 04:37 from mancyostcard/postcard.zip/postcard.exe Infected: Email-Worm.Win32.Warezov.kr skipped
C:\_OTMoveIt\MovedFiles\02282008_125256\Documents and Settings\David\Outlook.pst/Personal Folders/Deleted Items/23 Jan 2007 04:37 from mancyostcard/postcard.zip Infected: Email-Worm.Win32.Warezov.kr skipped
C:\_OTMoveIt\MovedFiles\02282008_125256\Documents and Settings\David\Outlook.pst Mail MS Mail: infected - 2 skipped
D:\System Volume Information\_restore{2D1D3E7F-7619-4B57-9717-9F90924ECB41}\RP3\change.log Object is locked skipped
D:\Recycled\NPROTECT\NPROTECT.LOG Object is locked skipped

Scan process completed.

 

Hi

How many use accounts are on the computer?

We can remove the OutLook1 and OutLook2 pst folders, but this could effect OutLook, because it holds all the folders for OutLook, Inbox, drafts, sent, deleted, etc

Let me know about the user accounts.

Geri

 

Just one user as far as I'm aware.

Not too worried about deleting anything from Outlook - it's all old.

 

Hi moray

OK here is what we'll do.

OTMoveIt2 makes a back up of everything it moves, so we'll use it to move the OutLook folders.
This way we can restore them if needed.

DO NOT delete or use the CleanUp Button of OTMoveIt2.

Then I want you to try using you email program and make sure there are no ill effects with it.
Also, I want you to open OutLook and look at what changes were made by doing this.

Let me know that your email program works...send someone a email and have someone send you a email back.

• Please double-click OTMoveIt2.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
• Copy the lines in the codebox below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
  
  
  Code:

  C:\Documents and Settings\David\Local Settings\Application Data\Microsoft\Outlook\Outlook1.pst
  C:\Documents and Settings\David\Local Settings\Application Data\Microsoft\Outlook\Outlook2.pst
  

• Return to OTMoveIt2, right click in the "Paste Standard List of Files/Folders to Move " window (under the light blue bar) and choose Paste.
• Click the red Moveit! button.
• Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
• Close OTMoveIt2

Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

Please post a new Kaspersky scan.

Let me know about the email programs.

Geri