Passwd.log Show log and Trojan in Debug

Rodolfo · October 2020

Every time when I login, the c:\windows\debug\passwd.log shows password change errors. This is caused by Bitdefender

I use windows 10 and bitdefender free, but this problem happens in the paid version, as I tested the Total security 2021 version and the same thing happens. Every time you turn on the pc it generates a txt with information. And Bitdefender accuses this debug folder with a trojan.zmutzy.pante.

I tested all competitor antivirus or most and all of them, this PASSWD.LOG txt file is blank and does not report viruses, only when I install bitdefender that has this behavior.
It is a false positive, it is a virus, I find it strange that only bitdefender has this behavior, and accuses this virus sometimes.

c:\windows\debug\passwd.log - Passwd.log shows Every time log in Desktop.

10/03 00:04:27 Attempting password change server/domain DESKTOP-PC for user Administrador
10/03 00:04:28 SamChangePasswordUser2 on machine DESKTOP-PC for user Administrador returned 0x0
10/03 00:04:31 Attempting password change server/domain DESKTOP-PC for user Convidado
10/03 00:04:31 SamChangePasswordUser2 on machine DESKTOP-PC for user Convidado returned 0xc0000022
10/03 00:04:31 SamChangePasswordUser2 retry on machine DESKTOP-PC for user Convidado returned 0xc0000022
10/03 00:04:31 Attempting password change server/domain DESKTOP-PC for user DefaultAccount
10/03 00:04:31 SamChangePasswordUser2 on machine DESKTOP-PC for user DefaultAccount returned 0x0
10/03 00:04:31 Attempting password change server/domain DESKTOP-PC for user Maquina
10/03 00:04:32 SamChangePasswordUser2 on machine DESKTOP-PC for user Maquina returned 0x0
10/03 00:04:33 Attempting password change server/domain DESKTOP-PC for user UpdatusUser
10/03 00:04:33 SamChangePasswordUser2 on machine DESKTOP-PC for user UpdatusUser returned 0xc000006a
10/03 00:04:33 Attempting password change server/domain DESKTOP-PC for user WDAGUtilityAccount
10/03 00:04:34 SamChangePasswordUser2 on machine DESKTOP-PC for user WDAGUtilityAccount returned 0xc000006a