[solved] Bit Defender 2010 Can't Remove Trojan.fakeav.kzq

Hi,

Thank you in advance for your help. I'm new to this forum.

I've recently renewed BitDefender, and am currently running BitDefender Antivirus 2010. I just performed a deep scan, and BitDefender was able to remove three trojans. However, it seems unable to remove one remaining trojan, named "Trojan.FakeAV.KZQ." I believe this is the trojan that's currently "taken over" my Internet Explorer, as it won't work, displaying "Internet Explorer cannot display the webpage" on any website, though my internet connection is good, and Firefox and Safari otherwise function perfectly.

I would really appreciate help on how to remove this specific infection, as the program itself seems unable to delete this specific file.

Please find below the log.

Thanks so much!

_______________________

BitDefender Log File

Product: BitDefender Antivirus 2010

Version: BitDefender Antivirus Scanner

Scanning task: Deep System Scan

Log date: 7/13/2010 8:07:47 PM

Log path: C:\ProgramData\BitDefender\Desktop\Profiles\Logs\deep_scan\1279073267_1_02.xml

Scan paths:Path 0000: C:\

Path 0001: \

Scan options:Scan for viruses: Yes

Scan for adware: Yes

Scan for spyware: Yes

Scan for applications: Yes

Scan for dialers: Yes

Scan for rootkits: Yes

Scan for keyloggers: Yes

Options:Scan registry keys: Yes

Scan cookies: Yes

Scan boot sectors: Yes

Scan memory processes: Yes

Scan archives: Yes

Scan runtime packers: Yes

Scan e-mails: No

Scan all files: Yes

Heuristic Scan: Yes

Scanned extensions:

Excluded extensions:

Target Processing:Default first action for infected objects: Disinfect

Default second action for infected objects: None

Default first action for suspect objects : None

Default second action for suspicious objects: None

Default action for hidden objects: None

Default first action for encrypted infected objects: Disinfect

Default second action for encrypted infected objects: None

Default first action for encrypted suspicious objects: None

Default second action for encrypted suspicious objects: None

Default action for password-protected objects: Log only

Scan Engines SummaryVirus signatures: 6497979

Archive plugins: 44

E-mail plugins: 6

Scan plugins: 14

System plugins: 5

Unpack plugins: 10

Overall Scan SummaryScanned items: 634309

Skipped items: 57986

Infected items: 4

Suspect items: 0

Resolved items: 3

Unresolved items: 1

Password-protected items: 160

Over-compressed items: 0

Individual viruses found: 3

Scanned folders: 37955

Scanned boot sectors: 3

Scanned archives: 5305

Input-output errors: 54

Scan time: 04:07:15

Files per second: 40

Scanned Processes SummaryScanned: 67

Infected: 0

Scanned registry keys summaryScanned: 1358

Infected: 0

Scanned cookies summaryScanned: 1

Infected: 0

Remaining issues:Object Path Threat Name Final Status

C:\Users\sasha chacon\AppData\Local\owidarex.dll Trojan.FakeAV.KZQ Delete failed (object was not found)

Resolved issues:Object Path Threat Name Final Status

C:\Users\sasha chacon\AppData\Local\Temp\rmowgCSeEd.exe Trojan.Generic.KD.19781 Deleted

C:\Users\sasha chacon\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\316b4185-33295700=]myf/y/LoaderX.class Java.Trojan.Exploit.Bytverify.I Deleted

C:\Users\sasha chacon\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\316b4185-33295700=]myf/y/NbablaF.class Java.Trojan.Exploit.Bytverify.I Deleted

Not scanned objects:Object Path Reason: Final Status

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKBrowse.ttd=]tmp/..PKText.PKBrowse.en_US Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKBrowse.ttd=]tmp/..PKText.PKBrowse.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKBrowse.ttd=]tmp/..PKText.PKBrowse.ja_JP Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKCmnDlg.ttd=]tmp/..PKText.PKCmnDlg.en_US Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKCmnDlg.ttd=]tmp/..PKText.PKCmnDlg.en_US-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKCmnDlg.ttd=]tmp/..PKText.PKCmnDlg.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKCmnDlg.ttd=]tmp/..PKText.PKCmnDlg.fr_FR-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKCmnDlg.ttd=]tmp/..PKText.PKCmnDlg.ja_JP Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKCmnDlg.ttd=]tmp/..PKText.PKCmnDlg.ja_JP-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKCOM700.ttd=]tmp/..PKText.PKCOM700.en_US Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKCOM700.ttd=]tmp/..PKText.PKCOM700.en_US-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKCOM700.ttd=]tmp/..PKText.PKCOM700.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKCOM700.ttd=]tmp/..PKText.PKCOM700.fr_FR-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKCOM700.ttd=]tmp/..PKText.PKCOM700.ja_JP Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKCOM700.ttd=]tmp/..PKText.PKCOM700.ja_JP-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKOPT700Text.ttd=]tmp/..PKText.PKOPT700Text.en_US Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKOPT700Text.ttd=]tmp/..PKText.PKOPT700Text.en_US-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKOPT700Text.ttd=]tmp/..PKText.PKOPT700Text.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKOPT700Text.ttd=]tmp/..PKText.PKOPT700Text.fr_FR-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKOPT700Text.ttd=]tmp/..PKText.PKOPT700Text.ja_JP Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKOPT700Text.ttd=]tmp/..PKText.PKOPT700Text.ja_JP-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKSerial.ttd=]tmp/..PKText.PKSerial.en_US Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKSerial.ttd=]tmp/..PKText.PKSerial.en_US-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKSerial.ttd=]tmp/..PKText.PKSerial.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKSerial.ttd=]tmp/..PKText.PKSerial.fr_FR-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKSerial.ttd=]tmp/..PKText.PKSerial.ja_JP Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKSerial.ttd=]tmp/..PKText.PKSerial.ja_JP-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKSFXS\pksfxs.dat=]AIX5X_PPC_C1230 Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKSFXS\pksfxs.dat=]DOS_X86_C250 Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKSFXS\pksfxs.dat=]DOSJR_X86_C250 Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKSFXS\pksfxs.dat=]HPUX_ITA_C1230 Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKSFXS\pksfxs.dat=]HPUX_PAR_C1230 Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKSFXS\pksfxs.dat=]LNX2X_390_C1230 Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKSFXS\pksfxs.dat=]LNX2X_X86_C1230 Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKSFXS\pksfxs.dat=]SOL2X_SPC_C1230 Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKSFXS\pksfxs.dat=]WIN32_X86_C1230 Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKSFXS\pksfxs.dat=]WIN32_X86_G1230 Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKTLV700.ttd=]tmp/..PKText.PKTLV700.en_US Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKTLV700.ttd=]tmp/..PKText.PKTLV700.en_US-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKTLV700.ttd=]tmp/..PKText.PKTLV700.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKTLV700.ttd=]tmp/..PKText.PKTLV700.fr_FR-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKTLV700.ttd=]tmp/..PKText.PKTLV700.ja_JP Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKTLV700.ttd=]tmp/..PKText.PKTLV700.ja_JP-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKWizardText.ttd=]tmp/..PKText.PKWizardText.en_US Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKWizardText.ttd=]tmp/..PKText.PKWizardText.en_US-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKWizardText.ttd=]tmp/..PKText.PKWizardText.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKWizardText.ttd=]tmp/..PKText.PKWizardText.fr_FR-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKWizardText.ttd=]tmp/..PKText.PKWizardText.ja_JP Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP7\PKWizardText.ttd=]tmp/..PKText.PKWizardText.ja_JP-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP8\Collections\Common.ttd=]tmp/..PKText.Common.en_US Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP8\Collections\Common.ttd=]tmp/..PKText.Common.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP8\Collections\Common.ttd=]tmp/..PKText.Common.ja_JP Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP8\Collections\Vendor.ttd=]tmp/..PKText.Vendor.en_US Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP8\Collections\Vendor.ttd=]tmp/..PKText.Vendor.en_US-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP8\Collections\Vendor.ttd=]tmp/..PKText.Vendor.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP8\Collections\Vendor.ttd=]tmp/..PKText.Vendor.fr_FR-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP8\Collections\Vendor.ttd=]tmp/..PKText.Vendor.ja_JP Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\Common Files\PKWARE\PKZIP8\Collections\Vendor.ttd=]tmp/..PKText.Vendor.ja_JP-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\PKWARE\PKZIPM\12.50.0013\PKMail.ttd=]tmp/..PKText.PKMail.en_US Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\PKWARE\PKZIPM\12.50.0013\PKMail.ttd=]tmp/..PKText.PKMail.en_US-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\PKWARE\PKZIPM\12.50.0013\PKMail.ttd=]tmp/..PKText.PKMail.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\PKWARE\PKZIPM\12.50.0013\PKMail.ttd=]tmp/..PKText.PKMail.fr_FR-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\PKWARE\PKZIPM\12.50.0013\PKMail.ttd=]tmp/..PKText.PKMail.ja_JP Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\PKWARE\PKZIPM\12.50.0013\PKMail.ttd=]tmp/..PKText.PKMail.ja_JP-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\PKWARE\PKZIPO\pksstext.ttd=]tmp/..PKText.PKSSText.en_US Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\PKWARE\PKZIPO\pksstext.ttd=]tmp/..PKText.PKSSText.en_US-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\PKWARE\PKZIPO\pksstext.ttd=]tmp/..PKText.PKSSText.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\PKWARE\PKZIPO\pksstext.ttd=]tmp/..PKText.PKSSText.fr_FR-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\PKWARE\PKZIPW\PKZIPGUI.ttd=]tmp/..PKText.PKZIPGUI.en_US Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\PKWARE\PKZIPW\PKZIPGUI.ttd=]tmp/..PKText.PKZIPGUI.en_US-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\PKWARE\PKZIPW\PKZIPGUI.ttd=]tmp/..PKText.PKZIPGUI.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\PKWARE\PKZIPW\PKZIPGUI.ttd=]tmp/..PKText.PKZIPGUI.fr_FR-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\PKWARE\PKZIPW\PKZIPGUI.ttd=]tmp/..PKText.PKZIPGUI.ja_JP Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\PKWARE\PKZIPW\PKZIPGUI.ttd=]tmp/..PKText.PKZIPGUI.ja_JP-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\PKWARE\PKZIPW\PKZIPWR\PKZIPGUI.ttd=]tmp/..PKText.PKZIPGUI.en_US Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\PKWARE\PKZIPW\PKZIPWR\PKZIPGUI.ttd=]tmp/..PKText.PKZIPGUI.en_US-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\PKWARE\PKZIPW\PKZIPWR\PKZIPGUI.ttd=]tmp/..PKText.PKZIPGUI.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\PKWARE\PKZIPW\PKZIPWR\PKZIPGUI.ttd=]tmp/..PKText.PKZIPGUI.fr_FR-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\PKWARE\PKZIPW\PKZIPWR\PKZIPGUI.ttd=]tmp/..PKText.PKZIPGUI.ja_JP Password-protected: Not scanned: (file was password-protected)

C:\Program Files (x86)\PKWARE\PKZIPW\PKZIPWR\PKZIPGUI.ttd=]tmp/..PKText.PKZIPGUI.ja_JP-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKZIPGUI.ttd=]tmp/..PKText.PKZIPGUI.en_US Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKZIPGUI.ttd=]tmp/..PKText.PKZIPGUI.en_US-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKZIPGUI.ttd=]tmp/..PKText.PKZIPGUI.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKZIPGUI.ttd=]tmp/..PKText.PKZIPGUI.fr_FR-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKZIPGUI.ttd=]tmp/..PKText.PKZIPGUI.ja_JP Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKZIPGUI.ttd=]tmp/..PKText.PKZIPGUI.ja_JP-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]pkzipgui.ttd1=]tmp/..PKText.PKZIPGUI.en_US Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]pkzipgui.ttd1=]tmp/..PKText.PKZIPGUI.en_US-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]pkzipgui.ttd1=]tmp/..PKText.PKZIPGUI.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]pkzipgui.ttd1=]tmp/..PKText.PKZIPGUI.fr_FR-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]pkzipgui.ttd1=]tmp/..PKText.PKZIPGUI.ja_JP Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]pkzipgui.ttd1=]tmp/..PKText.PKZIPGUI.ja_JP-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKMail.ttd1=]tmp/..PKText.PKMail.en_US Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKMail.ttd1=]tmp/..PKText.PKMail.en_US-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKMail.ttd1=]tmp/..PKText.PKMail.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKMail.ttd1=]tmp/..PKText.PKMail.fr_FR-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKMail.ttd1=]tmp/..PKText.PKMail.ja_JP Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKMail.ttd1=]tmp/..PKText.PKMail.ja_JP-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]Common.ttd=]tmp/..PKText.Common.en_US Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]Common.ttd=]tmp/..PKText.Common.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]Common.ttd=]tmp/..PKText.Common.ja_JP Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]Vendor.ttd=]tmp/..PKText.Vendor.en_US Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]Vendor.ttd=]tmp/..PKText.Vendor.en_US-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]Vendor.ttd=]tmp/..PKText.Vendor.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]Vendor.ttd=]tmp/..PKText.Vendor.fr_FR-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]Vendor.ttd=]tmp/..PKText.Vendor.ja_JP Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]Vendor.ttd=]tmp/..PKText.Vendor.ja_JP-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKBrowse.ttd=]tmp/..PKText.PKBrowse.en_US Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKBrowse.ttd=]tmp/..PKText.PKBrowse.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKBrowse.ttd=]tmp/..PKText.PKBrowse.ja_JP Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKCOM700.ttd1=]tmp/..PKText.PKCOM700.en_US Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKCOM700.ttd1=]tmp/..PKText.PKCOM700.en_US-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKCOM700.ttd1=]tmp/..PKText.PKCOM700.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKCOM700.ttd1=]tmp/..PKText.PKCOM700.fr_FR-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKCOM700.ttd1=]tmp/..PKText.PKCOM700.ja_JP Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKCOM700.ttd1=]tmp/..PKText.PKCOM700.ja_JP-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKSerial.ttd1=]tmp/..PKText.PKSerial.en_US Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKSerial.ttd1=]tmp/..PKText.PKSerial.en_US-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKSerial.ttd1=]tmp/..PKText.PKSerial.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKSerial.ttd1=]tmp/..PKText.PKSerial.fr_FR-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKSerial.ttd1=]tmp/..PKText.PKSerial.ja_JP Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKSerial.ttd1=]tmp/..PKText.PKSerial.ja_JP-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKCmnDlg.ttd1=]tmp/..PKText.PKCmnDlg.en_US Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKCmnDlg.ttd1=]tmp/..PKText.PKCmnDlg.en_US-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKCmnDlg.ttd1=]tmp/..PKText.PKCmnDlg.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKCmnDlg.ttd1=]tmp/..PKText.PKCmnDlg.fr_FR-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKCmnDlg.ttd1=]tmp/..PKText.PKCmnDlg.ja_JP Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKCmnDlg.ttd1=]tmp/..PKText.PKCmnDlg.ja_JP-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKOPT700Text.ttd1=]tmp/..PKText.PKOPT700Text.en_US Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKOPT700Text.ttd1=]tmp/..PKText.PKOPT700Text.en_US-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKOPT700Text.ttd1=]tmp/..PKText.PKOPT700Text.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKOPT700Text.ttd1=]tmp/..PKText.PKOPT700Text.fr_FR-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKOPT700Text.ttd1=]tmp/..PKText.PKOPT700Text.ja_JP Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKOPT700Text.ttd1=]tmp/..PKText.PKOPT700Text.ja_JP-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]pksstext.ttd=]tmp/..PKText.PKSSText.en_US Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]pksstext.ttd=]tmp/..PKText.PKSSText.en_US-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]pksstext.ttd=]tmp/..PKText.PKSSText.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]pksstext.ttd=]tmp/..PKText.PKSSText.fr_FR-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]pksfxs.dat=]AIX5X_PPC_C1230 Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]pksfxs.dat=]DOS_X86_C250 Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]pksfxs.dat=]DOSJR_X86_C250 Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]pksfxs.dat=]HPUX_ITA_C1230 Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]pksfxs.dat=]HPUX_PAR_C1230 Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]pksfxs.dat=]LNX2X_390_C1230 Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]pksfxs.dat=]LNX2X_X86_C1230 Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]pksfxs.dat=]SOL2X_SPC_C1230 Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]pksfxs.dat=]WIN32_X86_C1230 Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]pksfxs.dat=]WIN32_X86_G1230 Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKWizardText.ttd1=]tmp/..PKText.PKWizardText.en_US Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKWizardText.ttd1=]tmp/..PKText.PKWizardText.en_US-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKWizardText.ttd1=]tmp/..PKText.PKWizardText.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKWizardText.ttd1=]tmp/..PKText.PKWizardText.fr_FR-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKWizardText.ttd1=]tmp/..PKText.PKWizardText.ja_JP Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKWizardText.ttd1=]tmp/..PKText.PKWizardText.ja_JP-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKTLV700.ttd1=]tmp/..PKText.PKTLV700.en_US Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKTLV700.ttd1=]tmp/..PKText.PKTLV700.en_US-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKTLV700.ttd1=]tmp/..PKText.PKTLV700.fr_FR Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKTLV700.ttd1=]tmp/..PKText.PKTLV700.fr_FR-SECURE Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKTLV700.ttd1=]tmp/..PKText.PKTLV700.ja_JP Password-protected: Not scanned: (file was password-protected)

C:\Users\sasha chacon\AppData\Local\Downloaded Installations\{76DE1E00-37FC-453B-849D-649F5C74A8D8}\PKZIP for Windows 12.50.0013.msi=](Embedded CAB)=]PKTLV700.ttd1=]tmp/..PKText.PKTLV700.ja_JP-SECURE Password-protected: Not scanned: (file was password-protected)

Find more posts tagged with

Comments

unknown

Hi,

In order to be able to assist you please run a Deep System Scan task with BitDefender and send us the resulting scan report.

[how to GENERATE A DEEP SYSTEM SCAN LOG]

- Before running the scan please make sure that you have the latest virus definitions downloaded via the Update module: open BitDefender and click the "Settings" button in the upper right side of the interface; Switch UI to "Novice Mode"; Click "OK"; Choose the "Update Now" task;

- After the update process completes successfully you can proceed to running the scan task: select the "Scan Now" task;

- When the scan ends, click the "View Log" button at the bottom right of the scan window; A browser window will open displaying the scan report; Save this file on a location of your choice and then send it to us by uploading the file HERE

[how to RETRIEVE THE LATEST DEEP SYSTEM SCAN LOG]

- Open BitDefender and click the "View Logs" link on the lower right; Click the "Antivirus" tab on the left;

- In the "On-demand tasks" list (the one on the bottom) look for the latest (closest to the top) entry that reads "Deep System Scan" under the "Task Name" column and "Scan Finished" under the "Action name"; Double-click this entry and click the "View Scan Log" button at the bottom of the window that just popped up; A browser window will open displaying the scan report.

Please do not copy/paste the log in the topic.

You can send me a PM with the download link for the scan log or send it to Support@BitDefender.com

Looking forward to your answer!

boulderfans

I had the same malware yesterday.

The reason you cannot access the internet is because BitDefender removed the .dll that was installed by the malware, but the malware has also configured your proxy server to connect to the internet through that .dll. Since that .dll is no longer running, it can't connect.

Go to your internet settings and clear the proxy settings, that should fix you.

I'm still a bit concerned that BitDefender didn't get everything. I ran a deep system scan last night that showed no problems, but then it popped up today removing a .dll in my appdata/local folder when svchost.exe tried to load it. There have been about 20 different .dll's removed by BitDefender so far, all with filenames that look like random gibberish, but they were all in my appdata/local/temp folder, which is where the initial malware was run from. I'm not sure which svchost was trying to load it though.

Cristi Raducu

@spimentel12 and boulderfans

Please follow the steps described in this KB article and send me by PM the logs.

http://kb.bitdefender.com/KB490-en--The-sy...s-infected.html

C:\Users\sasha chacon\AppData\Local\owidarex.dll Trojan.FakeAV.KZQ Delete failed (object was not found) means that when BitDefender finished the scan and tried to delete that certain file it wasn't there anymore.

This can occur when the file was removed in real time by BitDefender OR that was just a temporary file dropped by the virus and it removed itself.

boulderfans

@spimentel12 and boulderfans

Please follow the steps described in this KB article and send me by PM the logs.

http://kb.bitdefender.com/KB490-en--The-sy...s-infected.html

C:\Users\sasha chacon\AppData\Local\owidarex.dll Trojan.FakeAV.KZQ Delete failed (object was not found) means that when BitDefender finished the scan and tried to delete that certain file it wasn't there anymore.

This can occur when the file was removed in real time by BitDefender OR that was just a temporary file dropped by the virus and it removed itself.

Ever since that last .dll was removed, I have had no other issues. The scans always come up clean, I pushed the real-time protection to maximum levels for the last few days , and have nothing reported.

Cristi Raducu

That's great news

=CASE CLOSED=