Solved Windows 2003 server hijacked-can't access control panel as admin

Kaspersky log 12-5-07 part 1

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
2007-12-05 08:39
Operating System: Microsoft Windows Server 2003, Standard Edition, Service Pack 2 (Build 3790)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 5/12/2007
Kaspersky Anti-Virus database records: 472813
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
E:\
F:\
G:\
I:\

Scan Statistics:
Total number of scanned objects: 231488
Number of viruses found: 10
Number of infected objects: 44
Number of suspicious objects: 7
Duration of the scan process: 02:51:26

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\Administrator.65GW2003\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Administrator.65GW2003\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT Object is locked skipped
C:\Documents and Settings\Administrator.65GW2003\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Administrator.65GW2003\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Administrator.65GW2003\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Administrator.65GW2003\Local Settings\Temp\hsperfdata_Administrator\4004 Object is locked skipped
C:\Documents and Settings\Administrator.65GW2003\Local Settings\Temp\hsperfdata_Administrator\4028 Object is locked skipped
C:\Documents and Settings\Administrator.65GW2003\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Administrator.65GW2003\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Administrator.65GW2003\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C680000.VBN Infected: Trojan-Downloader.Win32.Agent.eus skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C680001.VBN Infected: Trojan-Downloader.Win32.Agent.eus skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C680002.VBN Infected: Trojan-Downloader.Win32.Agent.eus skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C680003.VBN Infected: Trojan-Downloader.Win32.Agent.eus skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C680004.VBN Infected: Trojan-Downloader.Win32.Agent.eus skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C680005.VBN Infected: Trojan-Downloader.Win32.Agent.eus skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C680006.VBN Infected: Trojan-Downloader.Win32.Alphabet.gen skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C680007.VBN Infected: Trojan-Downloader.Win32.Alphabet.gen skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C680008.VBN Infected: Trojan-Downloader.Win32.Alphabet.gen skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C680009.VBN Infected: Trojan-Downloader.Win32.Alphabet.gen skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C68000A.VBN Infected: Trojan-Downloader.Win32.Agent.eus skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C68000B.VBN Infected: Trojan-Downloader.Win32.Agent.eus skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C68000C.VBN Infected: Trojan-Downloader.Win32.Alphabet.gen skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C68000D.VBN Infected: Trojan-Downloader.Win32.Alphabet.gen skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C68000E.VBN Infected: not-a-virusownloader.Win32.UltimateFix.e skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C68000F.VBN Infected: not-a-virusownloader.Win32.UltimateFix.e skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C680010.VBN Infected: Trojan-Downloader.Win32.Agent.eus skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C680011.VBN Infected: Trojan-Downloader.Win32.Agent.eus skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C680012.VBN Infected: Trojan-Downloader.Win32.Alphabet.gen skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C680013.VBN Infected: Trojan-Downloader.Win32.Alphabet.gen skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C680014.VBN Infected: Trojan-Downloader.Win32.Alphabet.gen skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C680015.VBN Infected: Trojan-Downloader.Win32.Alphabet.gen skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C680016.VBN Infected: Trojan-Downloader.Win32.Alphabet.gen skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C680017.VBN Infected: Trojan-Downloader.Win32.Alphabet.gen skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C680018.VBN Infected: Trojan-Downloader.Win32.Agent.eus skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C680019.VBN Infected: Trojan-Downloader.Win32.Agent.eus skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C68001A.VBN Infected: Trojan-Downloader.Win32.Agent.eus skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\1C68001B.VBN Infected: Trojan-Downloader.Win32.Agent.eus skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\23E00000.VBN/MagicApplet.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\23E00000.VBN/Installer.class Infected: Trojan-Downloader.Java.Agent.a skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\23E00000.VBN ZIP: infected - 2 skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\23E00000.VBN CryptZ: infected - 2 skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\23E00001.VBN Infected: Trojan.HTML.Agent.e skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\23E00002.VBN Infected: Trojan-Downloader.Win32.Alphabet.gen skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\23E00003.VBN Infected: Trojan-Downloader.Win32.Alphabet.gen skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\2F580000.VBN Infected: Trojan-Downloader.Win32.Agent.eus skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\2F580001.VBN Infected: Trojan-Downloader.Win32.Agent.eus skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\2F580002.VBN Infected: Trojan-Downloader.Win32.Agent.eus skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\2F580003.VBN Infected: Trojan-Downloader.Win32.Agent.eus skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\2F580004.VBN Infected: Trojan-Downloader.Win32.Agent.eus skipped
C:\Documents and Settings\gillettp\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\gillettp\Local Settings\Application Data\ApplicationHistory\ClientActivity.exe.2206d373.ini.inuse Object is locked skipped
C:\Documents and Settings\gillettp\Local Settings\Application Data\ApplicationHistory\HomeWorks.exe.8693fcd2.ini.inuse Object is locked skipped
C:\Documents and Settings\gillettp\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\gillettp\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\gillettp\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\gillettp\Local Settings\temp\3\~DF92BC.tmp Object is locked skipped
C:\Documents and Settings\gillettp\Local Settings\temp\3\~DFBE97.tmp Object is locked skipped
C:\Documents and Settings\gillettp\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\gillettp\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\gillettp\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\gillettp\Sti_Trace.log Object is locked skipped
C:\Documents and Settings\kinlochp\Local Settings\Application Data\ApplicationHistory\ClientActivity.exe.2206d373.ini.inuse Object is locked skipped
C:\Documents and Settings\kinlochp\Local Settings\Application Data\ApplicationHistory\HomeWorks.exe.8693fcd2.ini.inuse Object is locked skipped
C:\Documents and Settings\kinlochp\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\kinlochp\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\kinlochp\Local Settings\temp\2\~DF12A3.tmp Object is locked skipped
C:\Documents and Settings\kinlochp\Local Settings\temp\2\~DF33C5.tmp Object is locked skipped
C:\Documents and Settings\kinlochp\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\kinlochp\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\kinlochp\Sti_Trace.log Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Sti_Trace.log Object is locked skipped
C:\Documents and Settings\LocalService\wiadebug.log Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Dell\SysMgt\iws\logs\20071125_errors.log Object is locked skipped
C:\WINDOWS\Debug\Netlogon.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\DEFAULT Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SYSTEM Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\MsDtc\MSDTC.LOG Object is locked skipped
C:\WINDOWS\system32\MsDtc\Trace\dtctrace.log Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\Tasks\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\Temp\hsperfdata_SYSTEM\1724 Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
E:\Accounts\65G\MyDoc\65gsupport\desktop.ini Object is locked skipped
E:\Accounts\65G\MyDoc\65gtest\desktop.ini Object is locked skipped
E:\Accounts\65G\MyDoc\palazzom\desktop.ini Object is locked skipped
E:\Accounts\65G\MyDoc\spitzj\desktop.ini Object is locked skipped
E:\Accounts\65G\MyDoc\spitzj\RNVISNT1.RPT Object is locked skipped
E:\Accounts\HOC\Corpshare\OUTLOOK\cosgrovek\cosgrovek.pst/Personal Folders/Deleted Items/30 Apr 2002 13:40 from gss8510:A new website.rtf Suspicious: Exploit.HTML.Iframe.FileDownload skipped
E:\Accounts\HOC\Corpshare\OUTLOOK\cosgrovek\cosgrovek.pst/Personal Folders/Inbox/30 Apr 2002 13:40 from gss8510:A new website.rtf Suspicious: Exploit.HTML.Iframe.FileDownload skipped
E:\Accounts\HOC\Corpshare\OUTLOOK\cosgrovek\cosgrovek.pst Mail MS Mail: suspicious - 2 skipped
E:\Accounts\HOC\Corpshare\OUTLOOK\marcusk\marcusk.pst/Personal Folders/Deleted Items/02 May 2002 20:00 from Natalie Copeland:Re: Your password.eml Suspicious: Exploit.HTML.Iframe.FileDownload skipped
E:\Accounts\HOC\Corpshare\OUTLOOK\marcusk\marcusk.pst/Personal Folders/Deleted Items/02 May 2002 20:00 from Natalie Copeland:Re: Your password.rtf Suspicious: Exploit.HTML.Iframe.FileDownload skipped
E:\Accounts\HOC\Corpshare\OUTLOOK\marcusk\marcusk.pst/Personal Folders/Deleted Items/02 May 2002 19:15 from blogan:Hi,KMarcus,please try again.rtf Suspicious: Exploit.HTML.Iframe.FileDownload skipped
E:\Accounts\HOC\Corpshare\OUTLOOK\marcusk\marcusk.pst Mail MS Mail: suspicious - 3 skipped
E:\Accounts\HOC\MyDoc\andersonp\07-08 Board members.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\2-000000009AE6C71A1EC7014CA53C465A91E9D398070041D50F4.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\20-000000009AE6C71A1EC7014CA53C465A91E9D398070041D50F.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\2007-11 Call Schedule.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\2007-11 Call Schedule0001.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\2007-11-19 Kit's Task List data.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\33-000000009AE6C71A1EC7014CA53C465A91E9D398070041D50F.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\5-000000009AE6C71A1EC7014CA53C465A91E9D398070041D50F4.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\ADC Home Health.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\Board Directors 07-08 dates.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\Board Directors 07-08 dates0001.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\Center ADC VS Adj ADC.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\Copy of 11-07 Comp Report.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\Diroperations.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\DonorExpress2k.mde Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\ExecutiveDirector.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\Financials for Managers.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\FW Naming opportunities.htm Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\Guidelines for Self Pay Patients.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\HOC Personnel Policy Handbook _2_.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\Hospice of Charleston Annual Review forms.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\Late 2007 request.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\Microsoft Office Outlook - Memo Style.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\Microsoft Office Outlook - Monthly Style.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\Microsoft Office Outlook - Monthly Style0001.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\Microsoft Office Outlook - Monthly Style0002.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\Naming opportunities.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\Normal.dot Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\Palliative Performance Prognosis.pdf Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\Resume for Stephen R Scoma.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\Staff Orientation.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\TB Prevention and Transmission Test.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\week of 11-11.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\WOW Card.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\www.dsf.health.state.pa.us-health-l...Regulations_for_Home_Health_Care_Agencies.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\www.hospiceofcharleston.org-giving-hospice_house.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\andersonp\~$ecutiveDirector.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\beattyt\1105 1116 Expense.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\beattyt\Associations to Join.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\beattyt\Competitive Analysis.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\beattyt\Copy of timesheetoffice - salaried.xls Object is locked skipped

 

Kaspersky log 12-5-07 part 2

E:\Accounts\HOC\MyDoc\beattyt\Hospice Savings Press Release.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\beattyt\Job Descripton.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\beattyt\Marketing Strategies.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\beattyt\MILEAGE REPORT FORM 1105 1116.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\blatchd\CACENTERTIMESHEET.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\bordelona\bills.rtf Object is locked skipped
E:\Accounts\HOC\MyDoc\bordelona\billys research paper.rtf Object is locked skipped
E:\Accounts\HOC\MyDoc\bordelona\Document.rtf Object is locked skipped
E:\Accounts\HOC\MyDoc\buchheite\Apartment Release Contract Support Letter.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\buchheite\Childrens Book List.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\buchheite\New Microsoft Word Document.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\buchheite\Release of Liability_donated item.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\chen-rosarios\Life is a classroom.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\chen-rosarios\MARS.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\chen-rosarios\My Pictures\thumb_4282Carter-OosterhouseA3.jpg Object is locked skipped
E:\Accounts\HOC\MyDoc\chen-rosarios\Patricia.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\chen-rosarios\~$fe is a classroom.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\AA Time Sheet-Salary.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\Admission Letters 485\HH Admission Letter.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\Admission Letters 485\Hospice Admission Letter.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\Admission Letters 485\Kids Path Letter.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\chart order cheat sheet for inpt.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\chart order for discharged, expired HC Charts.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\Current Audits\INITIAL AUDIT HOSPICE.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\Current Audits\INITIAL AUDIT-Home Care.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\Fax Sheet IntraMed.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\FAX SHEET.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\How to Notes\DEATH CERTIFICATE PROTOCOL.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\INITIAL AUDIT HOSPICE.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\INITIAL AUDIT-Home Care.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\INITIAL AUDIT-Kids Path.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\mail list.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\Master copies\fax sheet master.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\Master copies\INITIAL AUDIT HOSPICE.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\Master copies\INITIAL AUDIT-Home Care.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\Master copies\mail list-copy.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\Master copies\MD fax sheet copy.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\Master copies\TimeSheet-copy.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\MD fax sheet.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\Milton KPH note.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\Old Audits\ADIMISSION AUDIT- HH.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\Old Audits\Inpatient admission chart audit.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\Old Audits\INSH or SPH ADMISSION AUDIT for HOSPICE.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\Old Audits\revised ADMISSION AUDIT - HOSPICE.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\TimeSheet.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\creesed\~$meSheet.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\dorgerm\154_0000.txt Object is locked skipped
E:\Accounts\HOC\MyDoc\dorgerm\243_0000.txt Object is locked skipped
E:\Accounts\HOC\MyDoc\dorgerm\257_0000.txt Object is locked skipped
E:\Accounts\HOC\MyDoc\dorgerm\307_0000.txt Object is locked skipped
E:\Accounts\HOC\MyDoc\doucetm\mobilecare.hospiceofcharleston.org-mobilecare-(hjyogq45.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\gillettp\Bridget's letter.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\gillettp\Hey Paula.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\gillettp\Household Rules Revised 7.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\gillettp\shift note.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\gosnellj\5 2 07 notes.wpd Object is locked skipped
E:\Accounts\HOC\MyDoc\gosnellj\6 4 07 notes.wpd Object is locked skipped
E:\Accounts\HOC\MyDoc\gosnellj\amber wc.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\gosnellj\cccapp.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\gosnellj\Certificate Of Medical Necessity.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\gosnellj\CMN Jaiden.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\gosnellj\Error within Bti.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\gosnellj\laney.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\gosnellj\May 4 CMN.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\gosnellj\Medical Necessity Report gabe.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\gosnellj\muscles of leg.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\gosnellj\Pt referred to PT to assess for transfers and safety for the pt.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\higdonk\New Microsoft Office Publisher Document.pub Object is locked skipped
E:\Accounts\HOC\MyDoc\higdonk\New Microsoft Word Document.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\higdonk\New Text Document.txt Object is locked skipped
E:\Accounts\HOC\MyDoc\hoctest2\DonorExpress2k.mde Object is locked skipped
E:\Accounts\HOC\MyDoc\hoctest2\Employee Leave Sharing Bank.ppt Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\13th Annual Lowcountry Dining Phone Tree.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Allied medical.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Approval Form.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Approval Labels.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\BBurgElementary.jpg Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Billing Info.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Bills Sent for Approval.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\codes.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Colonial - Aug 07.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Colonial - July07.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Colonial Supplemental Ins. - June07.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\contact names.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\corpexchecks Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\denial letter.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Employee List.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\EmpLst2.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\FAX SHEET.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\file folder labels.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\file folder list.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\first advantage.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\guardian - july 07.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Guardian Dental - aug07.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\guardian life - aug07.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Insurance.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Jef. Pilot - June07.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\letter to BCBS.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Lincoln - Sept07.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Medcare - Medicaid Rates.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Medline check.TIF Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\MILEAGE REPORT FORM.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Monthly Fax Chart.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\MONTHLY RENT.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\My Data Sources\+Connect to New Data Source.odc Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\My Data Sources\+New SQL Server Connection.odc Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\My Data Sources\DATACONN.HTC Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\My Data Sources\DESKTOP.INI Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\My Data Sources\FOLDER.ICO Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\OFF (MON-FRI).rtf Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\phone label.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\points to ponder.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\PTO Request Form.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Return Address Labels.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Supv List 5-2007 (2).xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Time Sheets\Nov.11-Nov.17.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Time Sheets\Nov.18-Nov.24.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Time Sheets\Nov.4-Nov.10.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Time Sheets\Nov25-Dec1.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Time Sheets\Oct.14-Oct.20.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Time Sheets\Oct.21-Oct.27.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Time Sheets\Oct.28-Nov.3.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Time Sheets\Oct.7-Oct.13.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Time Sheets\Sept.30-Oct.6.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\Time Sheets\Time Sheet - Kimberly.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\united - aug07.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\United adjustments-aug07.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\United Invoice.pdf Object is locked skipped
E:\Accounts\HOC\MyDoc\jacobsk\VT convocation.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\kinlochp\Document1.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\kinlochp\Document10001.tif Object is locked skipped
E:\Accounts\HOC\MyDoc\kinlochp\Ind. Pt. Report sheets.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\larsonp\Report.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\lathama\DonorExpress2k.mde Object is locked skipped
E:\Accounts\HOC\MyDoc\lathama\New Microsoft Word Document (2).doc Object is locked skipped
E:\Accounts\HOC\MyDoc\lathama\New Microsoft Word Document.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\malloym\306_0000.txt Object is locked skipped
E:\Accounts\HOC\MyDoc\malloym\306_0001.txt Object is locked skipped
E:\Accounts\HOC\MyDoc\malloym\306_0002.txt Object is locked skipped
E:\Accounts\HOC\MyDoc\malloym\306_0003.txt Object is locked skipped
E:\Accounts\HOC\MyDoc\mcfaddenl\Daily Census.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\mcfaddenl\discharge.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\mcfaddenl\Meds from CVS.htm Object is locked skipped
E:\Accounts\HOC\MyDoc\mcfaddenl\Staff roster.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\musolfs\HIPPA VIOLATIONS.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\musolfs\Thumbs.db Object is locked skipped
E:\Accounts\HOC\MyDoc\prestidgeg\129_0000.txt Object is locked skipped
E:\Accounts\HOC\MyDoc\sanfordt\orentation.rtf Object is locked skipped
E:\Accounts\HOC\MyDoc\sloank\292_0000.txt Object is locked skipped
E:\Accounts\HOC\MyDoc\sloank\dredwardsmrshelms.rtf Object is locked skipped
E:\Accounts\HOC\MyDoc\sloank\drellisonreheyward.rtf Object is locked skipped
E:\Accounts\HOC\MyDoc\sloank\dremmelbelvin.rtf Object is locked skipped
E:\Accounts\HOC\MyDoc\sloank\drmonterorhodes.rtf Object is locked skipped
E:\Accounts\HOC\MyDoc\sloank\drrubanomarybrown.rtf Object is locked skipped
E:\Accounts\HOC\MyDoc\sloank\medcaireorder.rtf Object is locked skipped
E:\Accounts\HOC\MyDoc\sloank\todrcastellone.rtf Object is locked skipped
E:\Accounts\HOC\MyDoc\strimpleb\Form Internal Application.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\tailoredsystems\DonorExpress2k.mde Object is locked skipped
E:\Accounts\HOC\MyDoc\tailoredsystems\My Data Sources\+Connect to New Data Source.odc Object is locked skipped
E:\Accounts\HOC\MyDoc\tailoredsystems\My Data Sources\+New SQL Server Connection.odc Object is locked skipped
E:\Accounts\HOC\MyDoc\tailoredsystems\My Data Sources\DATACONN.HTC Object is locked skipped
E:\Accounts\HOC\MyDoc\tailoredsystems\My Data Sources\DESKTOP.INI Object is locked skipped
E:\Accounts\HOC\MyDoc\tailoredsystems\My Data Sources\FOLDER.ICO Object is locked skipped
E:\Accounts\HOC\MyDoc\tailoredsystems\qry_CandleLightFolks_092607.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\tailoredsystems\Query1.rtf Object is locked skipped
E:\Accounts\HOC\MyDoc\tailoredsystems\Query1.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\tailoredsystems\tblLowCountryDonors_Last5Years.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\tailoredsystems\tblNames.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\tailoredsystems\tmpNewsletterFolks_Mailing.xls Object is locked skipped
E:\Accounts\HOC\MyDoc\turnerm\BlackBerry_7100_Series_-_User_Guide.pdf Object is locked skipped
E:\Accounts\HOC\MyDoc\turnerm\Business Quick Reference.pdf Object is locked skipped
E:\Accounts\HOC\MyDoc\turnerm\Contemporary Memo.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\turnerm\COS draft.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\turnerm\Examples of miscommunications (3).doc Object is locked skipped
E:\Accounts\HOC\MyDoc\turnerm\Examples of miscommunications.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\turnerm\HomeWorks.lnk Object is locked skipped
E:\Accounts\HOC\MyDoc\turnerm\I like to respond to call center after I.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\turnerm\Josan's contact info.txt Object is locked skipped
E:\Accounts\HOC\MyDoc\turnerm\My Pictures\10054-l.jpg Object is locked skipped
E:\Accounts\HOC\MyDoc\turnerm\PPDrecord.txt Object is locked skipped
E:\Accounts\HOC\MyDoc\turnerm\ReAuthSum\BlakeDecwound.txt Object is locked skipped
E:\Accounts\HOC\MyDoc\turnerm\ReAuthSum\BlakeNov19-30.txt Object is locked skipped
E:\Accounts\HOC\MyDoc\turnerm\ReAuthSum\BlakeNovwound.txt Object is locked skipped
E:\Accounts\HOC\MyDoc\turnerm\ReAuthSum\BlakeOctwound.txt Object is locked skipped
E:\Accounts\HOC\MyDoc\turnerm\ReAuthSum\BlakeSeptwoundvac.txt Object is locked skipped
E:\Accounts\HOC\MyDoc\turnerm\suppliesBirt.txt Object is locked skipped
E:\Accounts\HOC\MyDoc\turnerm\~$amples of miscommunications (3).doc Object is locked skipped
E:\Accounts\HOC\MyDoc\turnerm\~$amples of miscommunications.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\turnerm\~$like to respond to call center after I.doc Object is locked skipped
E:\Accounts\HOC\MyDoc\turnerm\~WRL0011.tmp Object is locked skipped
E:\Accounts\HOC\MyDoc\turnerm\~WRL3783.tmp Object is locked skipped
E:\Accounts\HOC\MyDoc\wixk\307_0000.txt Object is locked skipped
E:\Accounts\HOC\MyDoc\wixk\307_0001.txt Object is locked skipped
E:\Program Files\RealVNC\VNC4\winvnc4.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4110 skipped
E:\Program Files\RealVNC\VNC4\wm_hooks.dll Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 skipped
E:\RECYCLER\S-1-5-21-2114191254-3386695089-3779284816-3623\De1.doc Object is locked skipped
E:\RECYCLER\S-1-5-21-2114191254-3386695089-3779284816-3624\De1.wpd Object is locked skipped
E:\RECYCLER\S-1-5-21-2114191254-3386695089-3779284816-3669\De1.doc Object is locked skipped
E:\RECYCLER\S-1-5-21-2114191254-3386695089-3779284816-3669\De3.jpg Object is locked skipped
E:\RECYCLER\S-1-5-21-2114191254-3386695089-3779284816-3669\De4.doc Object is locked skipped
E:\RECYCLER\S-1-5-21-2114191254-3386695089-3779284816-3669\De5.xlsx Object is locked skipped
E:\RECYCLER\S-1-5-21-2114191254-3386695089-3779284816-3669\De6 Object is locked skipped
E:\RECYCLER\S-1-5-21-2114191254-3386695089-3779284816-3669\De7 Object is locked skipped
E:\RECYCLER\S-1-5-21-2114191254-3386695089-3779284816-3715\De21.exe/mwsSetup.CommonCodebase.exe Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped
E:\RECYCLER\S-1-5-21-2114191254-3386695089-3779284816-3715\De21.exe CAB: infected - 1 skipped
E:\RECYCLER\S-1-5-21-2114191254-3386695089-3779284816-4489\De1.doc Object is locked skipped
E:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

Scan process completed.

 

Delete the Symantec quarantined items and empty the recycle bin.

That's it! How's it running now?

 

All done!

Running Beautifully now thank you. I really appreciate your help but hope I won't have to ask for it again anytime soon. . We've got much tighter restrictions on now. Thanks again,
Mary

 

I'm happy to hear that. You're most welcome Mary!