Searching logs for Internet Security after a probable false positive detected

Hi dear community,

I'm using BitDefender Internet Security on Windows 11 Pro.

The program found a QDTrojan.GenericKDCi.C6961C90A6 in EaseUS Data Recovery Wizard Professional and put many items in quarantine (many of them weren't directly related).

I'm surprised, as I bought EaseUS Data Recovery Wizard Professional and downloaded it from the official website. The file was on my hard drive for two months, and no problem has occurred ever since.

I think it was a false alarm. I deleted the file from my hard drive and only kept it on my external hard drive for further investigations.

I think I restored all the registry keys and elements that were quarantined, but I'd like to check if I did things well (it was 4am, and I was kind of sleepy).

Is there a way to access logs for non-business users?

Your answer will be precious.

Have a wonderful holiday season!

Find more posts tagged with

malware false positive

trojan

internet security

logs

Comments

Gjoksi

Hello.

First:

Next, go to:

C:\ProgramData\Bitdefender\Desktop\Quarantine

and there you'll find a file named "cache".

Copy the file on your desktop.

Next, download "DB browser for SQLite" here:

https://github.com/sqlitebrowser/sqlitebrowser/releases/download/v3.13.1/DB.Browser.for.SQLite-v3.13.1-win32.msi (for 32-bit Windows)

https://github.com/sqlitebrowser/sqlitebrowser/releases/download/v3.13.1/DB.Browser.for.SQLite-v3.13.1-win64.msi (for 64-bit Windows)

Open the program "DB Browser (SQLite)" and next open the file "cache".

Or:

Regards.

SvenSND

Hello @Gjoksi and thank you very much for your detailed answer,

I downloaded the portable version of the program: https://github.com/sqlitebrowser/sqlitebrowser/releases/download/v3.13.1/DB.Browser.for.SQLite-v3.13.1-win64.zip

When browsing the database, the "entries" part seems empty

Am I doing something wrong? The events occurred on the previous Tuesday.

Have a great day.

Kind regards,

Steven