Trojan Quarantine Failed And Unable To Delete

Hello,

I have Bit Defender 2011 and just completed a scan. There was a Tojan detected listed as Gen:Trojan.Heur.GM.500814830. The move to quarantine "failed". I tried to "delete" it, as is an option from the drop down box but it kept coming up as an issue with quarantine failed. Finally I chose to "ignore" but in the summary Bit says my computer is not free of viruses. Am I not able to remove this totally? If I can please give me directions on how to go about it. THANKS!!!

Find more posts tagged with

Comments

nikki605

I am moving your post from the BD 2011 forum to the Malware forum where it will receive the proper attention.

Please post the BitDefender scan log showing the infection.

Regards,

rlwcvt

Quick update:

I went in thru the Control Panel and deleted Internet Browsing History and Cookies and re-scanned (to be able to post the BD scan log for further assistance) using the Deep System Scan. Results Summary: Solved Issues: 1 Ignored Issues: 0. Since I had earlier clicked the ignore option for the Trojan found, as the delete option didn't work, I am worried that it' still hanging out in my computer. Or is it possible by delteing history and cookies I erased the Tojan from my computer (doubtful but hopeful)? I just want to be sure it's gone and not lurking about somewhere waiting to wreak havoc. If it's most likely still in my computer how do I locate it again or get BD to pick it out again? Thank you for taking the time to read this!

Below is the BD Log File, I am not able to open the [+]

BitDefender Log File

Product: BitDefender Total Security 2011

Scanning task: Deep System Scan

Log date: Thursday, August 04, 2011 7:40:43 PM

Log path: C:\ProgramData\BitDefender\Desktop\Profiles\Logs\dcf483c4-26d0-4e6f-ba28-6a53a00adae1\1312498095_1_02.xml

Scan paths:

Path : C:\

[-]Scan Results Summary

[+]Resolved issues:Object Path Threat Name Final Status

Cookie: C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Cookies\owner@doubleclick[1].txt Cookie.DoubleClick Deleted

[-]Not scanned objects:Object Path Reason: Final Status

File: C:\Program Files\Sprint\Sprint SmartView\SprintMobile.skx=>Startup.xml Password-protected Not scanned (file was password-protected)

File: C:\Program Files\Sprint\Sprint SmartView\Sprint.skx=>Startup.xml Password-protected Not scanned (file was password-protected)

File: C:\Program Files\Sprint\Sprint SmartView\SprintMobile.skx=>MultiMode.sgn Password-protected Not scanned (file was password-protected)

File: C:\Program Files\Sprint\Sprint SmartView\Sprint.skx=>MultiMode.sgn Password-protected Not scanned (file was password-protected)

File: C:\Program Files\Sprint\Sprint SmartView\SprintMobile.skx=>preview.bmp Password-protected Not scanned (file was password-protected)

File: C:\Program Files\Sprint\Sprint SmartView\Sprint.skx=>preview.bmp Password-protected Not scanned (file was password-protected)

File: C:\Program Files\Sprint\Sprint SmartView\SprintMobile.skx=>startup.sgn Password-protected Not scanned (file was password-protected)

File: C:\Program Files\Sprint\Sprint SmartView\SprintMobile.skx=>MultiMode.zip Password-protected Not scanned (file was password-protected)

File: C:\Program Files\Sprint\Sprint SmartView\Sprint.skx=>startup.sgn Password-protected Not scanned (file was password-protected)

File: C:\Program Files\Sprint\Sprint SmartView\Sprint.skx=>MultiMode.zip Password-protected Not scanned (file was password-protected)

[-]Detailed Scan Summary

[-]Basic

Scanned items: 434675

Infected items: 1

Suspect items: 0 (no suspected items have been detected)

Resolved items: 1

Unresolved items: 0 (no issues remained unresolved)

[+]Advanced

Scan time: 01: 29: 36

Files per second: 80

Skipped items: 0

Password-protected items: 10

Over-compressed items: 0

Scanned archives: 264

Input-output errors: 199

Scanned boot sectors: 0

Scanned processes: 2087

Infected processes: 0

Scanned registry keys: 21339

Infected registry keys: 0

Scanned cookies: 17

Infected cookies: 1

[+]Scan Options

[-]Target Threat Types:

Scan for viruses: Yes

Scan for adware: Yes

Scan for spyware: Yes

Scan for applications: Yes

Scan for dialers: Yes

Scan for rootkits: Yes

Scan for keyloggers: Yes

[-]Virus Scanning Options:

Scan registry keys: Yes

Scan cookies: Yes

Scan boot sectors: Yes

Scan memory processes: Yes

Scan archives: Yes

Scan runtime packers: Yes

Scan e-mails: Yes

Scan all files: Yes

Heuristic Scan: Yes

Scanned extensions: not configured

Excluded extensions: not configured

[-]Target Processing:

Default first action for infected objects: Disinfect

Default second action for infected objects: Move files to quarantine

Default first action for suspect objects : Move files to quarantine

Default second action for suspicious objects: None

Default action for hidden objects: None

Default action for password-protected objects: Log only

[-]Scan Engines Summary

Virus signatures: 8709342

rlwcvt

Update:

I re-scanned this morning and now for some reason BD picked up the Trojan again, I am not sure why it didn't on my last scan THursday evening, obviously my computer is still infected.

I apologize for any confusion. PLEASE HELP! I want to clean up my computer. THANKS!

Anyway the BD Log is shown below:

BitDefender Log File

Product: BitDefender Total Security 2011

Scanning task: Deep System Scan

Log date: Monday, August 08, 2011 11:57:45 AM

Log path: C:\ProgramData\BitDefender\Desktop\Profiles\Logs\dcf483c4-26d0-4e6f-ba28-6a53a00adae1\1312815247_1_03.xml

Scan paths:

Path : C:\

[-]Scan Results Summary

[-]Remaining issues:Object Path Threat Name Final Status

Process: VirtMem Region Dump 0x7ff97000 + 15000 Gen:Trojan.Heur.GM.5000814830 Infected

[+]Resolved issues:Object Path Threat Name Final Status

Cookie: C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Cookies\owner@doubleclick[2].txt Cookie.DoubleClick Deleted

Cookie: C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Cookies\Low\owner@advertising[2].txt Cookie.Advertising Deleted

[-]Not scanned objects:Object Path Reason: Final Status

File: C:\Program Files\Sprint\Sprint SmartView\SprintMobile.skx=>Startup.xml Password-protected Not scanned (file was password-protected)

File: C:\Program Files\Sprint\Sprint SmartView\Sprint.skx=>Startup.xml Password-protected Not scanned (file was password-protected)

File: C:\Program Files\Sprint\Sprint SmartView\SprintMobile.skx=>MultiMode.sgn Password-protected Not scanned (file was password-protected)

File: C:\Program Files\Sprint\Sprint SmartView\Sprint.skx=>MultiMode.sgn Password-protected Not scanned (file was password-protected)

File: C:\Program Files\Sprint\Sprint SmartView\SprintMobile.skx=>preview.bmp Password-protected Not scanned (file was password-protected)

File: C:\Program Files\Sprint\Sprint SmartView\Sprint.skx=>preview.bmp Password-protected Not scanned (file was password-protected)

File: C:\Program Files\Sprint\Sprint SmartView\SprintMobile.skx=>startup.sgn Password-protected Not scanned (file was password-protected)

File: C:\Program Files\Sprint\Sprint SmartView\SprintMobile.skx=>MultiMode.zip Password-protected Not scanned (file was password-protected)

File: C:\Program Files\Sprint\Sprint SmartView\Sprint.skx=>startup.sgn Password-protected Not scanned (file was password-protected)

File: C:\Program Files\Sprint\Sprint SmartView\Sprint.skx=>MultiMode.zip Password-protected Not scanned (file was password-protected)

[-]Detailed Scan Summary

[-]Basic

Scanned items: 550284

Infected items: 3

Suspect items: 0 (no suspected items have been detected)

Resolved items: 4

Unresolved items: 0

[+]Advanced

Scan time: 01: 59: 57

Files per second: 76

Skipped items: 97626

Password-protected items: 10

Over-compressed items: 0

Scanned archives: 239

Input-output errors: 0

Scanned boot sectors: 3

Scanned processes: 3817

Infected processes: 1

Scanned registry keys: 5887

Infected registry keys: 0

Scanned cookies: 23

Infected cookies: 2

[+]Scan Options

[-]Target Threat Types:

Scan for viruses: Yes

Scan for adware: Yes

Scan for spyware: Yes

Scan for applications: Yes

Scan for dialers: Yes

Scan for rootkits: Yes

Scan for keyloggers: Yes

[-]Virus Scanning Options:

Scan registry keys: Yes

Scan cookies: Yes

Scan boot sectors: Yes

Scan memory processes: Yes

Scan archives: Yes

Scan runtime packers: Yes

Scan e-mails: Yes

Scan all files: Yes

Heuristic Scan: Yes

Scanned extensions: not configured

Excluded extensions: not configured

[-]Target Processing:

Default first action for infected objects: Disinfect

Default second action for infected objects: Move files to quarantine

Default first action for suspect objects : Move files to quarantine

Default second action for suspicious objects: None

Default action for hidden objects: None

Default action for password-protected objects: Log only

[-]Scan Engines Summary

Virus signatures: 8756826

Cristi Raducu

Could you please tell me if you have a 64 bit operating system and if you're running with any other security products besides BitDefender,such as: Ad-aware,Malwarebytes,Spybot etc

rlwcvt

Could you please tell me if you have a 64 bit operating system and if you're running with any other security products besides BitDefender,such as: Ad-aware,Malwarebytes,Spybot etc

I have a 32-bit operating system and I have no other security other BD (at least none to my knowledge).

rlwcvt

Hello? Tech support? Please help, I replied 3 business days ago. No answer yet.

Cristi Raducu

This was a false alarm and detection has been removed.

Please run a new scan and post here the results.

rlwcvt

Current scan found no infected items. Thank you Cristi!

Product: BitDefender Total Security 2011

Scanning task: Deep System Scan

Log date: Wednesday, August 17, 2011 3:23:54 PM

Log path: C:\ProgramData\BitDefender\Desktop\Profiles\Logs\dcf483c4-26d0-4e6f-ba28-6a53a00adae1\1313604454_1_01.xml