Trojan.autoruninf.gen

Hi all! I have windows 7. I make a deep scan and i found this trojan. Desinfection failed, remove to Quarantine ok, reboot as says the BD and the trojan still there! here is the log:

Product: BitDefender Antivirus 2010

Version: BitDefender Antivirus Scanner

Scanning task: Deep System Scan

Log date: 23/2/2010 3:49:14 πμ

Log path: C:\ProgramData\BitDefender\Desktop\Profiles\Logs\deep_scan\1266889754_1_01.xml

Scan paths:

Path 0000: C:\

Path 0001: E:\

Path 0002: F:\

Scan Level:

Scan for viruses: Yes

Scan for adware: Yes

Scan for spyware: Yes

Scan for applications: Yes

Scan for dialers: Yes

Scan for rootkits: Yes

Scan for keyloggers: Yes

Virus Scanning Options:

Scan registry keys: Yes

Scan cookies: Yes

Scan boot sectors: Yes

Scan memory processes: Yes

Scan archives: Yes

Scan runtime packers: Yes

Scan e-mails: Yes

Scan all files: Yes

Heuristic Scan: Yes

Scanned extensions: not configured

Excluded extensions: not configured

Target Processing:

Default first action for infected objects: Disinfect

Default second action for infected objects: None

Default first action for suspect objects : None

Default second action for suspicious objects: None

Default action for hidden objects: None

Default first action for encrypted infected objects: Disinfect

Default second action for encrypted infected objects: None

Default first action for encrypted suspicious objects: None

Default second action for encrypted suspicious objects: None

Default action for password-protected objects: Log only

Scan Engines Summary

Virus signatures: 5302353

Archive plugins: 44

E-mail plugins: 6

Scan plugins: 13

System plugins: 5

Unpack plugins: 8

Basic

Scanned items: 259195

Infected items: 2

Suspect items: 0 (no suspected items have been detected)

Hidden items: 0 (no hidden items have been detected during this scan)

Resolved items: 2

Unresolved items: 0 (no issues remained unresolved)

Advanced

Scan time: 00:17:30

Files per second: 246

Skipped items: 137771

Password-protected items: 0

Over-compressed items: 0

Individual viruses found: 1

Scanned folders: 18683

Scanned boot sectors: 10

Scanned archives: 2768

Input-output errors: 49

Scanned processes: 35

Infected processes: 0

Scanned registry keys: 1024

Infected registry keys: 0

Scanned cookies: 6

Infected cookies: 0

Resolved issues:Object Path Threat Name Final Status

C:\Windows\BitLockerDiscoveryVolumeContents\autorun.inf Trojan.AutorunINF.Gen Moved to Quarantine after reboot

C:\Windows\winsxs\x86_microsoft-windows-s..ccessagent-binaries_31bf3856ad364e35_6.1.7600.16385_none_de06b4fbd5b45f78\autorun.inf Trojan.AutorunINF.Gen Moved to Quarantine after reboot

What can i do? Thanks.

Find more posts tagged with

Comments

csalgau

Thank you for pointing this out. We're rolling out a fix as I write this.

The detection is a false positive that was already fixed internally but updates were not sent to users yet.

Have a nice day!

Cristi Raducu

Detection has been removed for the files in question.

Please make sure that your BitDefender is up to date.

Cristi.

ert6

yes is up to date

ert6

ok i make update, i run deep system scan and nothing found!! hahaa thanks very much What happens! weird..

ageorgi

Hi ert6,

I'm actually in the same boat. My log is posted below:

BitDefender Log File

Product: BitDefender Internet Security 2010

Version: BitDefender Antivirus Scanner

Scanning task: Contextual Scan

Log date: 23/02/2010 12:44:01 AM

Log path: C:\Users\**********\AppData\Roaming\BitDefender\Desktop\Profiles\Logs\contextual\1266903841_1_02.xml

Scan paths:

Path 0000: C:\Windows\winsxs

Scan Level:

Scan for viruses: Yes

Scan for adware: Yes

Scan for spyware: Yes

Scan for applications: Yes

Scan for dialers: Yes

Scan for rootkits: No

Scan for keyloggers: Yes

Virus Scanning Options:

Scan registry keys: No

Scan cookies: No

Scan boot sectors: No

Scan memory processes: No

Scan archives: Yes

Scan runtime packers: Yes

Scan e-mails: Yes

Scan all files: Yes

Heuristic Scan: Yes

Scanned extensions: not configured

Excluded extensions: not configured

Target Processing:

Default first action for infected objects: Disinfect

Default second action for infected objects: None

Default first action for suspect objects : None

Default second action for suspicious objects: None

Default action for hidden objects: None

Default first action for encrypted infected objects: Disinfect

Default second action for encrypted infected objects: None

Default first action for encrypted suspicious objects: None

Default second action for encrypted suspicious objects: None

Default action for password-protected objects: Prompt for password

Scan Engines Summary

Virus signatures: 5303295

Archive plugins: 44

E-mail plugins: 6

Scan plugins: 13

System plugins: 5

Unpack plugins: 8

Basic

Scanned items: 10413

Infected items: 1

Suspect items: 0 (no suspected items have been detected)

Hidden items: 0 (the scan options do not include scanning for rootkits)

Resolved items: 0 (infected or suspect items have been found and were ignored or could not be fixed)

Unresolved items: 1

Advanced

Scan time: 00:00:27

Files per second: 385

Skipped items: 46165

Password-protected items: 0

Over-compressed items: 0

Individual viruses found: 1

Scanned folders: 10221

Scanned boot sectors: 0

Scanned archives: 0

Input-output errors: 0

Scanned processes: 0

Infected processes: 0

Scanned registry keys: 0

Infected registry keys: 0

Scanned cookies: 0

Infected cookies: 0

Ignored objects:

Object Path Threat Name Final Status

C:\Windows\winsxs\x86_microsoft-windows-s..ccessagent-binaries_31bf3856ad364e35_6.1.7600.16385_none_de06b4fbd5b45f78\autorun.inf Trojan.AutorunINF.Gen Infected (ignored, user did not have the proper access rights)

How the heck can I get this fixed without having to wipe my computer which was Acer's recomendation by the way.

Please help.

ACG

csalgau

I've just tested with both our 32 bit and 64 bit signature bases and the detection is not present.

The file is clean and there is no reason to wipe your computer.

Please access the update tab and trigger the update manually.

ageorgi

I've just tested with both our 32 bit and 64 bit signature bases and the detection is not present.

The file is clean and there is no reason to wipe your computer.

Please access the update tab and trigger the update manually.

Thanks for the prompt response. Sounds very hopeful, I will try it out this afternoon and post back.

Thanks again,

ACG

ageorgi

Thanks for the prompt response. Sounds very hopeful, I will try it out this afternoon and post back.

Thanks again,

ACG

UPDATE WAS SUCCESSFUL - TROJAN.AUTORUNINF.GEN NO LONGER A THREAT.

THANKS FOR THE PROMT UPDATE

ert6

I made that they said me here, other yesterday I made one last scan with suspect stick connected other was careful the result. Today I made manualy update and afterwards deep scan and did not find no one virus! I did not understand precisely what became.