Firewall Down; Autrun Folder Opens

kdconod
edited May 2012 in Antivirus

Every time I boot my computer, I get a message that the Bitdefender firewall is down, but when I look at Bitdefender the firewall is on.


Also the Autorun folder (c:\Documents and Settings\All Users\Start Menu\Programs\Startup\AutorunsDisabled) opens and destop.ini opens in Notepad by themselves.


Any idea what could cause this?


I am using Bitdefender Antivirus Plus 2012 under Windows XP Home Edition Version 5.1.2600 Service Pack 3 Build 2600. I am also running Malwarebytes 1.51.2.1300

Comments

  • rootkit
    rootkit ✭✭✭
    edited May 2012

    Hi :)


    Welcome to our forums!


    Please follow the steps explained in the article below and send me via PM the generated log file:


    http://forum.bitdefender.com/index.php?showtopic=29927


    If the file is too big to attach it, upload it on


    http://www.sendspace.com


    or


    http://www.mediafire.com


    and send me a PM with the download link.


    If you were already asked to generate the log file, disregard the message above and just post the ticket ID.


    Have a nice day.

  • I've tried running the tool twice but it gets stuck at 99% "Getting Logs"

  • Rampant
    Rampant ✭✭

    Look at the destop.ini must attribute "hidden".

  • kdconod
    edited May 2012
    Look at the destop.ini must attribute "hidden".


    Yes thanks, I was able to change that but the Autorun folder is still opening and the Bitdefender support tool never finishes.

  • rootkit
    rootkit ✭✭✭

    Hello :)


    You have selected Malware issue in the Support tool and I only received the scan logs.


    Please run it again and select your issue from the list and let it run.


    Take care.

  • Rampant
    Rampant ✭✭
    Yes thanks, I was able to change that but the Autorun folder is still opening and the Bitdefender support tool never finishes.


    Check here:


    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup


    and here:


    C:\Users\"User"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

  • rootkit
    rootkit ✭✭✭

    Hello :)


    For that desktop.ini file you have here a KB article from Microsoft:


    http://support.microsoft.com/kb/330132


    Take care.

  • Hello :)


    You have selected Malware issue in the Support tool and I only received the scan logs.


    Please run it again and select your issue from the list and let it run.


    Take care.


    The support tool will not run at all - not in safe mode either: "BitDefender SupportTool has encountered a problem and needs to close. We are sorry for the inconvenience."

  • rootkit
    rootkit ✭✭✭

    Hello :)


    In this case, let's try something else.


    In order to be able to further investigate the reported situation we need a bit more information from your computer as follows:


    . A BDSYS log;


    [how to GENERATE A BDSYS LOG]


    . Save and extract the BDSYS tool to a location of your choice:


    http://www.bitdefender.com/files/Knowledge.../BDSysLog_i.exe


    . Make sure you close all active applications and then run "BDSysLog_i.exe"; If you receive a firewall


    alert,select to Allow the application to connect;


    . Click the "Create log" button to start generating the


    log; A progress bar is indicating that the tool is creating the report;


    . When the small window appears with the message "Log


    saved" then the report is complete and a new file named "bdsyslog.zip" has appeared on your Desktop;


    . Attach that file in your next reply.


    IMPORTANT:


    .During this process the Real Time Protection in Bitdefender must be temporarily disabled;


    .If you receive a Bitdefender Firewall alert to inform you that BDSysLog_i.exe tries to connect to the internet,then you need to select Allow;


    [how to DISABLE THE ANTIVIRUS PROTECTION in Bitdefender 2012]


    In order to disable the antivirus protection,please open Bitdefender and click the "Settings" button in the upper side part of the interface"; In the new window go to "Antivirus" > "Shield"tab and click on "Turn off" under On-access scanning.Select the time interval that suites your troubleshooting needs and click "OK" . The On-access scanning should be enabled back after finishing the troubleshooting procedure.


    We will get back to you as soon as the analysis is complete.


    Have a nice day.

  • Thanks results sent via PM.

  • rootkit
    rootkit ✭✭✭

    Hello :)


    The logs were forwarded to our labs.


    I will get back to you with a final answer soon.


    Take care.