Why am I often getting antivirus settings modified/deselected by themselves ? ?
I've recently uninstalled and reinstalled Bit defender Total Security on my OS using the native tools to do that,I've set the av to perform scans of boot sectors and archives ( enabling the maximum limit of size for that last one to search all the possible ones ) but when I close the software and after a while check the av settings again I often find these 2 options deselected...I've also create a password to protect the settings and I'm the only one that uses that PC,I don't have others antivirus softwares enabled apart from Malwarebytes free version that doesn't have real time protection enabled and I've enabled the Microsoft Defender's options to perform some additional scans in cooperation with BDTS .... So why I find these settings deselected by themselves so often and how could I solve that ?
P S : I've already opened a ticket for that with the assistance
Answers
-
Hello @Eno-Scott,
Are you running a scan while this happens? Some options are turned off during an active scan, so as not to interfere with the process.
But please do let us know what the Support engineers advise.
Regards,
Alex
Premium Security & Bitdefender Endpoint Security Tools user
1 -
I've seen that,but to be honest I've to ask you why the av do that? I mean if I want to check boot sectors for rootkits ( for ex. ) or the achives,why when I start a scan these options become disabled ? And considering that they're disabled during the scan the av checks for that ones?
Responding to your first: this time no,but like yo've explained I noticed that happens sometimes also during the scan (to be honest I've already have this issue in the past and I've opened a ticket before for it)
1 -
What type of scan are you running? And where do these options get deactivated, in the Bitdefender shield, or in the scan settings? Bitdefender shield is on-access scan, quick/system/custom scan is on-demand scan.
Premium Security & Bitdefender Endpoint Security Tools user
0 -
I was running a full system scan and I've founded them deactivated,that was the descripion of what happened this time:
1.Opened Bitdefender av
2.start full system scan
3.check in the scan settings (these ones),I've done that because I've alrready noticed that issue before
.4 founded the setings that I've said disabled
In addiction to that :
.Ive also seen these options disabled in the report at the end of the scan sometimes
.I've noticed that also some others function been disabled sometime ,they are : Alert mode , the option to recheck the antivirus files quarantined with better,scan of CD/DVD,USB and mapped network drives (alert mode seems to be the most often disabled )
1 -
I got exactly the same issue as Eno Scott had. I’m using similar settings and after scan starts settings are changed by itself.
And its confusing because I don’t know was the system scanned correct or not: (1 -
Hello @Tailer,
When they change by themselves, are they grayed out, like shown in the article below, or they simply deactivate and you still have the option to reactivate them?
Premium Security & Bitdefender Endpoint Security Tools user
0 -
Pinging @Eno-Scott here as well, let's see if he comes back and if he managed to solve this somehow.
Premium Security & Bitdefender Endpoint Security Tools user
1 -
Hello!
They are not greyed out, they are getting previous state. And after scan is completed they are back to state that I have set.
0 -
To be honest I'm still having this issue,not in the Antivirus > Advanced settings but in the settings related to the Quarantine,I'm seeing that every time that I open this module the rule related to making an exception for restored files goes from on to off in like a second … In additionsome times ago the AV founded a threat that I've quarantined and after that at the restart of the OS it was disappeared from there ..
I didn't opened a ticket for this one because I've had some other already opened but now that you ask me an opinion about that specific topic I suppose that could be appropriate reporting that here on this thread,in my case the specfic threat was :
On your opinion should I do some checks about that ?
1 -
@Eno-Scott thanks for sharing this. Yes, I think the behavior should be reported to Bitdefender Support. Have them check this and maybe we can further expand on the topic here, should you wish to share their findings with us as well. Now, regarding what @Tailer mentioned earlier, about using Microsoft Defender in parallel, I don't exclude an interference. The problem when actively using multiple security solutions on the same device is that sometimes this practice may degrade performance, because multiple antiviruses installed will always compete for the same resources. Furthermore, this may even prevent proper malware detection, so the functionality could be affected, modules turning on and off, other conflicts, system crashes, and software errors, etc.
The general rule of thumb is to have a single antivirus installed. Having multiple antivirus programs running at the same time will not make your computer more secure, on the contrary. I remember that AV-comparatives also released an article about this a while ago:For this reason, during the setup, Bitdefender identifies other security products that were previously installed. To ensure these different security solutions will not cause difficulties, it is recommended to uninstall them.
Now, I can't be 100% sure that Windows Defender, or Malwarebytes for that matter are actually interfering with Bitdefender's security modules, but since they were mentioned, I would try to remove/disable them both and test Bitdefender without them, to check if its security modules still turn off by themselves.Otherwise, this would be a task for Support, as they can collect some logs from the device using the dedicated Support tool and find out exactly what happens there. Here we can only make assumptions based on what we know so far..
Premium Security & Bitdefender Endpoint Security Tools user
1 -
@Alexandru_BD I'm still trying to resolve with support,I'm having problems with sending the file generated with the Support Tool,that's why I was advised to do a remote support session,for the time being I noticed that indeed I had once again the modules related to archive scanning and boot sector scanning disabled a while ago ,in addition I also had notifications related to possible indicators of compromise from the antivirus (related to e.g. automatic media execution,digital signature scanning,etc),I reported everything .
I've also encountered possible problems with VPN (it starts up by itself even though it shouldn't) and internet protection (e.g. I don't see Safe Search ticks in searches),I've already tried following the instructions in Bitdefender's guides to fix it,but it seems with poor results ...
For the moment,in addition to the Support Tool the support asked me to send them a file generated with BDSYS which I correctly sent ...
My PC is old so I do not exclude that these problems may be due to that ...
Regarding the possible conflict between different AV solutions,in my case I only have BDTS active but in the Windows security settings I chose to also do support scans with Defender (since there was this possibility), I don't think this can be the case of an interference, in fact the only solution in real time is precisely Bitdefender ... as an antimalware support I still use Malwarebytes Free (I don't know if you remember the thread I had published in this regard long ago about it) .. what do you think?
If I have updates following the remote session and you will be interested, I could let you know what they will tell me!1 -
Hi and thanks for getting back here.
Regarding the VPN, I would first look at the Auto-connect settings to find out if it's set to connect automatically in certain scenarios. Under General settings, check if the VPN is set to launch automatically at device startup. Then, go to Auto-connect settings and see if any of the options available there are enabled, for example "connect VPN at Windows startup" or whenever using unsecure Wi-Fi networks, peer to peer apps, specific applications or websites, or specific website categories.
As for the issues you have already reported to the Support teams, I think the remote session should normally reveal the root cause. Using Malwarebytes should cause no problems, in my opinion.
Sure, feel free to update this thread anytime with your findings and I'm sorry we couldn't do more here. It's just that some situations require more advanced troubleshooting and remote assistance, and this can only be achieved by the Support teams, as they have the required tools to do it.Regards
Premium Security & Bitdefender Endpoint Security Tools user
1 -
I set the settings to prevent VPN from activating at startup,as for the possible scenarios in which it should activate automatically I chose these settings:
However at the time it activates I don't feel like I'm using peer to peer apps or browsing any of the categories of sites listed...so how come it starts itself?
Could it possibly be due to some software redirecting my connection running in the background not being detected by the antivirus that I am not aware of?0 -
Hi,
The Auto-connect settings look fine. Pay attention to when it connects exactly, on which websites, as this could be a hint. Or disable the auto-connect for all website categories and peer-to-peer apps and see if it still connects automatically, to exclude a possible bug. Maybe some websites that you are accessing fall into one of the categories displayed there, so the VPN connects automatically then, since it believes it has a match. But maybe those pages don't actually fall into the respective categories at all, and in this case we can talk about a connection initiated incorrectly. I would point this out to Support as well.
If the antivirus doesn't find anything suspicious during the scan, but you suspect a browser redirect, you can reset your browser, clear cache & cookies and look for any unwanted browser extensions that might redirect in the background, although there should be clear signs of this, I mean, you should see the url there, or at least a pop-up, as this is what usually happens in adware scenarios.Premium Security & Bitdefender Endpoint Security Tools user
0
