Pc Attack Bit Deffender Saw Nothing !

My pc has been attack with the Cybercrime investigation Virus or Trojan wich ask you to pay $100.00 to unlock your pc and Bit Deffender saw absolutely nothing.

I am very upset of that. Fortunately, I restored a ghost and everything was fine 20 minutes later. I think I will switch to Kaspersky.

Find more posts tagged with

Comments

Aventador

You have a misconception about malware and antiviruses. NO I repeat NO antivirus can catch everything. Bitdefender actually has a far better detection rate then Kaspersky when check out sites such as AV Comparatives and AV Test.org. First of all you were not attacked. It is virtually impossible to get infected if you use common sense and safe surf. Using a 3rd party browser such as Chrome is the first step. Clicking on unknown links is how stuff like this happens. Also never use IE. So don't point your finger at Bitdefender when most likely it was you that caused this. You click on some link which lead you to a ransomeware page.

werby3

Hi,

So, according to Aventador, we have to visit only our mother's, father's, closest friend's sites or even better do not access internet at all, cause AV programs or browsers are not safe enough!!!

I believe, this infection MUST NOT have been happened with a payed AV product even more with BD that supposed to be on top of these products. The only thing I can imagine is for sd2 to miss some AV configuration or else this is UNACCEPTABLE, especially for this kind of infection._

Regards

werby3

...Sorry. I accidentally sent it again.

Hi,

So, according to Aventador, we have to visit only our mother's, father's, closest friend's sites or even better do not access internet at all, cause AV programs or browsers are not safe enough!!!

I believe, this infection MUST NOT have been happened with a payed AV product even more with BD that supposed to be on top of these products. The only thing I can imagine is for sd2 to miss some AV configuration or else this is UNACCEPTABLE, especially for this kind of infection._

Regards

Aventador

Lol..................Ever single av out there misses something. Paid or free. Do some research and get back to me. Just because BD did not detect it does not mean BD is no good and jump ship. If your surfing the internet dangerously and clicking on ever link you see then you deserve the conciseness. Common sense plays a huge part. I have never been infected and I have been using the internet for 15 years now.

werby3

...then you deserve the conciseness. Common sense...

...Please tell me where's your church and I'll come to hear you.

God Bless You

Aventador

...Please tell me where's your church and I'll come to hear you.

God Bless You

Sorry consequences.

werby3

You cannot blame users for software failures. That's all.

Regards!

Aventador

You cannot blame users for software failures. That's all.

Regards!

That is NOT a software failure. Man dont you get it. Symantec misses malware. Kaspersky misses malware. AVG misses malware. I am a systems engineer. I have seen every single antivirus product out there miss malware samples. ITS NORMAL. Nothing in the world can provide you with 100% protection. Bitdefender's detection rate is around 99.7%.

Go to the sites I have mentioned and see the overall results. MSE is actually one of the worst antiviruses out there. Staying malware free starts with the space between the chair and the mouse.

werby3

...Man dont you get it. ...

I think YOU don't get it.

Good night

Aventador

Notice how sd2 did not fully elaborate on exactly how this happened. I can guarantee you that it did not happen on its own. This type of ransomeware comes in as an email or a false linked web page. My cousin got hit with this cause he click on an email link from someone he didn't not know. And he uses NIS 2013. sd2 click on a link and now he is blaming Bitdefender for his own carelessness.

gigolo

Notice how sd2 did not fully elaborate on exactly how this happened. I can guarantee you that it did not happen on its own. This type of ransomeware comes in as an email or a false linked web page. My cousin got hit with this cause he click on an email link from someone he didn't not know. And he uses NIS 2013. sd2 click on a link and now he is blaming Bitdefender for his own carelessness.

Whatever you click on, a good program should detect it. This malware has been aroud since a couple of months and BDef didn't catch it yesterday so they are not up to date.

Aventador

Whatever you click on, a good program should detect it. This malware has been aroud since a couple of months and BDef didn't catch it yesterday so they are not up to date.

Lol..............Malware is recoded daily. There are about a million different versions of this. Once a cure is found they writers recode the malware. Just like rouge programs. There can be several different versions of it. So explain in full detail of how this happened to you. What browser? What did you click on? Again dont blame Bitdefender for your own carlessness. Do you release that any antivirus company releases daily updates. But those are to combat the known viruses. Millions of viruses are released everyday so its impossible to stay up on. Visit the Kaspersky forums,Symantec forums, AVG forums, Avast forums and you will see tons of cases of missed malware samples. ITS NORMAL.

gigolo

Lol..............Malware is recoded daily. There are about a million different versions of this. Once a cure is found they writers recode the malware. Just like rouge programs. There can be several different versions of it. So explain in full detail of how this happened to you. What browser? What did you click on? Again dont blame Bitdefender for your own carlessness. Do you release that any antivirus company releases daily updates. But those are to combat the known viruses. Millions of viruses are released everyday so its impossible to stay up on. Visit the Kaspersky forums,Symantec forums, AVG forums, Avast forums and you will see tons of cases of missed malware samples. ITS NORMAL.

I don't know how it happens, I do about a thousand of clicks every day ! Why pay for an antivirus and firewall if it does not detect known malwares.

Anyway I don't care, I make a ghost every week and it takes me 15 minutes to restore and everything is ok. A big finger to the hackers !!

Aventador

I don't know how it happens, I do about a thousand of clicks every day ! Why pay for an antivirus and firewall if it does not detect known malwares.

Anyway I don't care, I make a ghost every week and it takes me 15 minutes to restore and everything is ok. A big finger to the hackers !!

Typical click happy answer. You should know how it happened. You were the one who clicked on something. For starters never use IE. Use a 3rd party browser such as Google Chrome. Never open emails from people you do not know. Add AdBlock Plus and Do Not Track Plus to Google Chrome. There is no such terminology as "malwares". Keep in mind you do not need to pay for an antivirus. Avast and Panda Cloud are provide great free protection. Did you buy Bitdefender Antivirus or Internet Security?

gigolo

Typical click happy answer. You should know how it happened. You were the one who clicked on something. For starters never use IE. Use a 3rd party browser such as Google Chrome. Never open emails from people you do not know. Add AdBlock Plus and Do Not Track Plus to Google Chrome. There is no such terminology as "malwares". Keep in mind you do not need to pay for an antivirus. Avast and Panda Cloud are provide great free protection. Did you buy Bitdefender Antivirus or Internet Security?

I have Bit Defender total security 2013, I use Opera 12 as browser and about "malware", I was refering to this program: http://www.malwareXXXXX.org/

Aventador

MalwareBytes is a great program. All you need is the free version for on-demand scanning.

coolcool1227

Antivirus consideration points

1) Detection Rates.

2) Protection Technologies e.g. Signature Based, Generic and Pattern-based, Heuristics Detection, Behavioral Scanning, Intrusion Detection system, HIPS, Cloud-Based detection etc.

3) Protection Features/Modules e.g. Firewall, Anti-Spam, Anti-Banner, Anti-Phishing, Parental Control, Anti-Rootkit, Anti-Theft, Privacy Control, Sandbox Feature (Application and Browser), Secure Browsing, Rescue Mode/CD, Boot-time Scan, Command Line Scan, USB Blocking and Immunizing, Detailed Logging and ****** Execution (for removing some malwares, install patches), Social Network Protection, Personal Data Filter, Vulnerability Scan, etc.

4) Additional Features offered e.g. Tune-Up, Backup/Restore, File and Messenger Encryption, Game/Silent/Laptop Mode, File shredder etc.

5) Self Protection feature and ability to install, if the system is already infected badly.

6) Ability to remove malware traces and leftovers completely.

7) Able to restore/undo any unwanted changes/damages made by the malware in the system

8) Technical Support and Service.

9) Resource Utilization (Not resource hogging).

10) Small Installation Footprints i.e. occupies less space after installation.

11) False Positives Rates.

12) Cost of the product.

Even with all protection technologies and features, no antivirus in the market can give you 100 % protection against all malwares. But you must configure the antivirus to optimum settings for maximum detections.

Aventador

Thank you ONT. Also I am not sure but I don't think Bitdefender supports Opera. The web shield that is.

coolcool1227

Bitdefender has no AdBlock or AntiBanner protection, but the standalone Bitdefender Trafficlight tool have the AdBlock option and both of them are browser independent. And Bitdefender do scan http web traffic.

Aventador

Google Chrome has been proven to be the most secure browser. Try it sd2.

rootkit

Hello everyone

sd2

I am sorry for the delay of our answer and I hope to assist you in a timely fashion from now on. I would like to take advantage of this opportunity to convey our apologies in regards to the situation created.

As Aventador mentioned in one of the posts, several versions of this ransomware are released everyday. So security programs are fighting with these products because they pose as legit, there is nothing suspicious or infected in the code.

Is your system still infected?

In order to be able to further investigate the reported situation we need a bit more information from your computer as follows:

. A BDSYS log;

[how to GENERATE A BDSYS LOG]

. Save and extract the BDSYS tool to a location of your choice:

http://www.bitdefender.com/files/Knowledge.../BDSysLog_i.exe

. Make sure you close all active applications and then run "BDSysLog_i.exe"; If you receive a firewall

alert,select to Allow the application to connect;

. Click the "Create log" button to start generating the

log; A progress bar is indicating that the tool is creating the report;

. When the small window appears with the message "Log

saved" then the report is complete and a new file named "bdsyslog.zip" has appeared on your Desktop;

. Upload that file on

http://www.sendspace.com

http://www.mediafire.com

and send me a PM with the download link.

If you were already asked to generate the log file, disregard the message above and just post the ticket ID.

IMPORTANT:

.During this process the Real Time Protection in Bitdefender must be temporarily disabled;

.If you receive a Bitdefender Firewall alert to inform you that BDSysLog_i.exe tries to connect to the internet,then you need to select Allow;

[how to DISABLE THE ANTIVIRUS PROTECTION in Bitdefender 2013]

In order to disable the antivirus protection, please open Bitdefender and click the "Settings" button in the upper side part of the interface"; In the new window go to "Antivirus" > "Shield" tab and click on "ON" under On-access scanning. Select the time interval that suites your troubleshooting needs and click "OK". The On-access scanning should be enabled back after finishing the troubleshooting procedure.

We will get back to you as soon as the analysis is complete.

Have a nice day.

fynster

Hello everyone

sd2

I am sorry for the delay of our answer and I hope to assist you in a timely fashion from now on. I would like to take advantage of this opportunity to convey our apologies in regards to the situation created.

As Aventador mentioned in one of the posts, several versions of this ransomware are released everyday. So security programs are fighting with these products because they pose as legit, there is nothing suspicious or infected in the code.

Is your system still infected?

In order to be able to further investigate the reported situation we need a bit more information from your computer as follows:

. A BDSYS log;

[how to GENERATE A BDSYS LOG]

. Save and extract the BDSYS tool to a location of your choice:

http://www.bitdefender.com/files/Knowledge.../BDSysLog_i.exe

. Make sure you close all active applications and then run "BDSysLog_i.exe"; If you receive a firewall

alert,select to Allow the application to connect;

. Click the "Create log" button to start generating the

log; A progress bar is indicating that the tool is creating the report;

. When the small window appears with the message "Log

saved" then the report is complete and a new file named "bdsyslog.zip" has appeared on your Desktop;

. Upload that file on

http://www.sendspace.com

or

http://www.mediafire.com

and send me a PM with the download link.

If you were already asked to generate the log file, disregard the message above and just post the ticket ID.

IMPORTANT:

.During this process the Real Time Protection in Bitdefender must be temporarily disabled;

.If you receive a Bitdefender Firewall alert to inform you that BDSysLog_i.exe tries to connect to the internet,then you need to select Allow;

[how to DISABLE THE ANTIVIRUS PROTECTION in Bitdefender 2013]

In order to disable the antivirus protection, please open Bitdefender and click the "Settings" button in the upper side part of the interface"; In the new window go to "Antivirus" > "Shield" tab and click on "ON" under On-access scanning. Select the time interval that suites your troubleshooting needs and click "OK". The On-access scanning should be enabled back after finishing the troubleshooting procedure.

We will get back to you as soon as the analysis is complete.

Have a nice day.

Hi Christian,

My husband managed to get the FBI ransomeware malware on his system, though I thought I had trained him better <_< .

I restarted his system in safe mode with networking and did a manual scan. This found and resolved some threats but the malware is still in place. He is running Windows 7 64 bit Pro with Bitdefender Internet Security 2013. I am now going to create a BDsys log per your instructions above and hope to hear back from you soon with further instructions.

Thank in advance,

Fynster

rootkit

Hello

Thank you for your patience.

We have analyzed the scan log you have sent us. In order to remove all infected objects from your computer you need to perform the following steps:

. Restart the computer in Safe Mode With Networking;

[How to restart in SAFE MODE With Networking]

- Restart the computer;

- Press the "F8" key several times before Microsoft Windows begins to load; you need to press "F8" until you will be displayed a text menu;

- Select "SAFE MODE With Networking"

. Display hidden objects in Windows (how to information is written bellow);

[how to DISPLAY HIDDEN OBJECTS]

- go to your "Control Panel" and open "Folder Options";

- then go to the "View" tab and perform the changes listed below:

* check "Display contents of system folders"

* check "Show hidden files and folders"

* uncheck "Hide file extensions for known file types"

* uncheck "Hide protected operating system files"

- click "Apply" and then "OK" to exit.

NOTE: On Microsoft Windows Vista/7 you will apply the same steps except for selecting "Display contents of system folders".

For more information you can read the following article:

http://kb.bitdefender.com/KB354-en--Reveal...em-folders.html

. Locate the suspect/infected file(s):

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\QuickBooks Update Agent.lnk

C:\Users\Merritt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Password Safe.lnk

c:\users\merritt\appdata\local\temp\013b2670f3ed.exe

. Compress the files using a common archiver of your choice (e.g.: WinZip, WinRAR, WinAce etc.); Protect the archive with the password "infected" (or another password of your choice);