[solved] Gen:trojan.heur.fu.ou1@ac2311vt

I've been getting this lately, about a week ago when Adobe Flash Player v10 required an update. Since then, most of the application which requires the updated version of the Flash Player would not work.

BitDefender would block the installation directly from the website, http://get.adobe.com/flashplayer/ when real-time protection is enabled.

Using a manual installer would trigger the following after installation:

Virus Name: Gen:Trojan.Heur.FU.ou1@aC2311vT

File: C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10k_ActiveX.exe

Action Taken: Deleted

Soon after the Installer would also be automatically removed.

Virus Name: Gen:Trojan.Heur.FU.Sw1@aWC4YdvT

With the following file deleted, Flash Player would not work. I've listed it on the exclusion files, however it seems that BitDefender has ignored the request and proceed with deletion.

Any Feedback Received is greatly appreciated.

Regards,

Tian

Find more posts tagged with

Comments

runetian7

Log file link: http://depositfiles.com/files/ackypiccp

Password: Inf*****

csalgau

Have you tried this recently? The posted log is quite old.

I've checked current and some previous builds of the mentioned product and I'm not seeing any detections at the moment. I've also tried with the the definitions available when you performed the scan and still clean.

Could you please set BitDefender to quarantine/take no action instead of disinfect/delete, update and retry? If you still have problems, please upload(and link here) some of the quarantined files(disable real-time scanning, restore file, archive and upload, reenable real-time scanning).

Thank you.

runetian7

Reinstalled the flash player after turning off real time protection. The following occured in real time protection and system scan.

Log File Link: http://depositfiles.com/files/6zatz5brs

Password: inf*****

I'm not particularly sure how to turn off disinfect/delete files on system scan, however i've turned off disinfect/delete files on real time protection.

Thank for the feedback. Hope this reply has sufficient information.

csalgau

Please disable real-time protection then retry installing then archive and upload

C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10k_ActiveX.exe

I'm not really sure why it's detecting this on your system. You're probably using a different version of the file that I'm unable to obtain.

runetian7

Download link for FlashUtil10k_ActiveX.exe: http://depositfiles.com/files/quhqmwqro

Download link for FlashUtil10k_ActiveX.dll: http://depositfiles.com/files/o0ham4hon

I cant create the arhieve from the folder itself. Had to do the following:-

Send to

Compressed zip folder

Location: Desktop

Hopefully the following steps did not alter any function or information required for the fix.

runetian7

BitDefender Alert: http://depositfiles.com/files/fw1vm1dpe

This occured when i open a webpage which uses the flash player. All links uploaded have the same password as before

csalgau

Sorry for the delay.

This shouldn't be happening. It appears that some of the definition files may be older than they were supposed to be on your computer.

Please find the newest Antivirus_xxxx_xxxx folder in your Program Files\Common Files\BitDefender\BitDefender Threat Scanner\ directory and provide cevakrnl.rv3 and cevakrnl.rv8 from the Plugins subfolder. I hope this will suffice.

runetian7

I've 2 folders which have the same thing (the difference between the 2 folders is just by a couple of minutes)... so i extracted both

Download Link: http://depositfiles.com/files/nx7r2c1il

Thanks for all the feedback... Hopefully it can be resolved soon too~

csalgau

While I'm not sure why this problem occurred occurred, I believe the reason for your situation is an inability to replace Plugins\ceva_dll.cvd.upd and Plugins\ceva_vfs.cvd.upd by the update process. Please reboot your system in safe mode, remove those files and Plugins\ceva_dll.cvd and Plugins\ceva_vfs.cvd from both av64bit_20753 and av64bit_20757, then restart the system in normal mode and update. Please try this and then post the result.

runetian7

After removing the 4 files below from both av64bit_20753 and av64bit_20757;

Plugins\ceva_dll.cvd

Plugins\ceva_dll.cvd.upd

Plugins\ceva_vfs.cvd

Plugins\ceva_vfs.cvd.upd

It seems that I am unable to connect to The Bitdefender Security Service (vsserv.exe) as it is unavailable at the moment. I'll try again later in the day to see if the same thing occurs.

Note: I'm also unable to restore the files as I've deleted it entirely from the system.

runetian7

Problem solved after replacing the following:

Plugins\ceva_dll.cvd

Plugins\ceva_vfs.cvd

in both av64bit_20753 and av64bit_20757.

Ran a full system scan, no issues occured. Adb Flashplayer works fine now.

Thanks for all the feedback, CS.

~ Topic Closed ~

csalgau

nice to hear.