Removing Trojan

HI,

I have encountered a problem with bitdefender. I scanned my system for viruses ( Full Scan) and BD tells me that there is a trojan that cannot be removed. can you please help me? I'm having great problems with my computer.

when I download something, some another thing is downloading too. when my download is over,

that thing is still downloading. (till I shut down my computer).

system is slower now.

Find more posts tagged with

Comments

Bhanuka

My BD log file.

BitDefender Log File

Product: BitDefender Internet Security 2011

Scanning task: Full System Scan

Log date: Friday, March 04, 2011 9:54:51 AM

Log path: C:\ProgramData\BitDefender\Desktop\Profiles\Logs\6f349eda-6759-4378-b3c9-9174905515f7\1299210334_1_03.xml

Scan paths:

Path : C:\

Path : \

Path : E:\

[-]Scan Results Summary

[-]Remaining issues:

Object Path Threat Name Final Status

File: E:\System Volume Information\_restore{13B41748-CF14-47B4-A5CE-C46270151FBA}\RP17\A0002259.exe Trojan.Generic.5503552 Infected (ignored, user did not have the proper access rights)

[-]Resolved issues:

Object Path Threat Name Final Status

Cookie: C:\Users\Bhanuka\AppData\Roaming\Microsoft\Windows\Cookies\Low\bhanuka@doubleclick[2].txt Cookie.DoubleClick Deleted

Cookie: C:\Users\Bhanuka\AppData\Roaming\Microsoft\Windows\Cookies\bhanuka@doubleclick[1].txt Cookie.DoubleClick Deleted

[-]Basic

Scanned items: 289727

Infected items: 3

Suspect items: 0 (no suspected items have been detected)

Resolved items: 2

Unresolved items: 1

[-]Advanced

Scan time: 00: 35: 16

Files per second: 136

Skipped items: 56121

Password-protected items: 4

Over-compressed items: 0

Scanned archives: 164

Input-output errors: 0

Scanned boot sectors: 4

Scanned processes: 2168

Infected processes: 0

Scanned registry keys: 13127

Infected registry keys: 0

Scanned cookies: 27

Infected cookies: 2

[-]Scan Options

[-]Target Threat Types:

Scan for viruses: Yes

Scan for adware: Yes

Scan for spyware: Yes

Scan for applications: Yes

Scan for dialers: Yes

Scan for rootkits: No

Scan for keyloggers: Yes

[-]Virus Scanning Options:

Scan registry keys: Yes

Scan cookies: Yes

Scan boot sectors: Yes

Scan memory processes: Yes

Scan archives: Yes

Scan runtime packers: Yes

Scan e-mails: Yes

Scan all files: Yes

Heuristic Scan: Yes

Scanned extensions: not configured

Excluded extensions: not configured

[-]Target Processing:

Default first action for infected objects: Disinfect

Default second action for infected objects: Move files to quarantine

Default first action for suspect objects : Move files to quarantine

Default second action for suspicious objects: None

Default action for hidden objects: None

Default action for password-protected objects: Log only

[-]Scan Engines Summary

Virus signatures: 6756212

coolcool1227

PS: You should reconfigure "Target Processing" and enable "Scan for Rootkits" and then run Deep System scan again in Administrator account.

Chimel

@ONT There is no such option in my BDA, how do you configure it? I only see "scan boot sectors" in the antivirus protection level settings in Expert mode.

Cristi Raducu

It means that you need to run a deep scan instead of full.

Chimel

I see, thanks, Cristi. So you can't even get the rootkit scan option in aggressive protection level for normal system scans?

BTW, I assume you mean "system scan" as I don't see a "full scan" option in my BDA 2010 settings or in the logs. Edit: Never mind, it's mentioned in the Help, so it's probably present in BDA 2009 or 2011.

The logs would gain being more explicit and less confusing: It's already mentioned that it's a system scan in the log, so I don't understand why it says "Scan for rootkits: No" when you can't actually toggle it to Yes for a system scan. And rootkit scans should be included in the default settings in my opinion, this is primordial protection.

While I'm off topic ^-^, is there any information somewhere about the differences between the deep system scan and the system scan?

There is absolutely nothing in the help or the GUI about these types of scan.

coolcool1227

@While I'm off topic ^-^, is there any information somewhere about the differences between the deep system scan and the system scan?

Kindly check the html file from the below path (considering the default location for Bitdefender installation).

C:\Program Files\BitDefender\BitDefender 2011\Support\offlinemanual\html\antivirus.scan.tasks.html

and also read this

http://download.bitdefender.com/windows/de...ials/BD2011/en/

Also you can read datasheet and user guide from

http://www.bitdefender.com/world/solutions...t-security.html

http://download.bitdefender.com/windows/de...serGuide_en.pdf

Hope this will help you

@so I don't understand why it says "Scan for rootkits: No" when you can't actually toggle it to Yes for a system scan

Scan for rootkits option is enabled by-default in Deep System Scan but you have to configure Target Processing.

@So you can't even get the rootkit scan option in aggressive protection level for normal system scans?

These settings are for Real Time Protection only. Kindly read this post for further detail.

Chimel

Thanks, @ONT. This HTML file and Target Processing do not exist in BDA 2010, but the online user guide for BDA 2011 does mention the difference between full and deep system scans.

And I finally managed to find a BDA 2011 download that doesn't require a partner sponsor, so all is good, I have now scheduled the deep system scan daily instead of weekly full system scan.

I still don't see Target Processing anywhere , but I can see "Scan for rootkits" now in the task properties, Scanning Options|Custom.

----------

For other readers: The download links from the bitdefender.com Home Users section don't work, the working downloads are hidden in http://www.bitdefender.com/world/Downloads/.

coolcool1227

By Target Processing I mean "Action Options" which are also available in BD2010.

And if you want to get help for BD2010, then manually search in the Bitdefender installation folder for "bdhelp.chm" file and "offlinekb" folder as I forget their exact location.

Chimel

I see, I thought it was some GUI item, as you capitalized it. ^-^

There's nothing in BDA 2010 help about the system scans.