Kindly be advised we cannot cancel subscriptions or issue refunds on the forum.
You may cancel your Bitdefender subscription from Bitdefender Central or by contacting Customer Support at: https://www.bitdefender.com/consumer/support/help/

Thank you for your understanding.

First Time Scanning With Bd...qs

Options

Just today I dloaded BD AV V10. I am still getting accustomed to it as I have used other paid for AV and Antispyware up till now.


As we speak it is doing a deep scan. It is 93% complete and it is listing 8 *suspect* objects in the Virus info section.


However currently only 2 of the 8 are shown in the Event List...I might have cleared Log during the scan? Would that explain the missing 6?


I am very confident that they are all false positives. The absence of one of these files (c:\program files\microsoft office\office11\startup\fxequation.dot) now prevents MS Office from loading a programme (FXequation) that it has done successfully for the past several months :(.


What did I do wrong? Is/was there a way for me to get BD to ignore these files?

Comments

  • Ivo
    Options

    Hi,


    You can put them in your exclusion list to not scan the parent folder or the actual file.


    Secondly if you are sure these are false positives, send them to BitDefender, they will investigate the file and if it is not a virus they will flag them as beeing clean. The next time you then update your virus definitions the files will no longer be detected as infected. But for now, put them in your exclusion list.

  • 21Rouge
    Options
    Hi,


    You can put them in your exclusion list to not scan the parent folder or the actual file.


    Thanks for the reply. Where in BD does one establish an "Exclusion List"?


    Secondly if you are sure these are false positives, send them to BitDefender, they will investigate the file and if it is not a virus they will flag them as beeing clean.


    But as of now where is the one file I was particulary concerned with; mentioned in my first post? Because right now that programme which used to load as an addon to MS Word no longer does....due to the...absence? of that file. I didnt want it deleted.

  • Niels
    Options

    Hello 21Rouge


    To exclude a folder during an on demand open BitDefender go to antivirus,scanning,rightclick on the scan you wanted to execute choose change scanpath press on add new folder and browse to the folder you don't wanted to be scanned. Don't forget to uncheck it. To exclude a folder in realtime mode go to shield,custom level,exclude path from scan,add (new) item and browse to the folder you don't wanted to be scanned press on ok.


    Can you please post the scanreport of the latest scan. To do so go to general,events,use the filter for anti-virus, doubelclick on your last scanreport press on more info.


    Regards


    Niels

  • 21Rouge
    Options
    Hello 21Rouge


    To exclude a folder during an on demand open BitDefender go to antivirus,scanning,rightclick on the scan you wanted to execute choose change scanpath press on add new folder and browse to the folder you don't wanted to be scanned.


    I appreciate the quick reply Niels. I should have looked just a bit more on these forums as the procedure is described in another thread...sorry. So you can only exclude a folder as opposed to a specific file?


    To exclude a folder in realtime mode go to shield,custom level,exclude path from scan,add (new) item and browse to the folder you don't wanted to be scanned press on ok.


    Oh so I have to exclude in realtime as well if I dont want BD picking it up outside of a requested/scheduled scan?


    Can you please post the scanreport of the latest scan. To do so go to general,events,use the filter for anti-virus, doubelclick on your last scanreport press on more info.


    I mst have cleared the Log as nothing is shown :(. Do I need to scan again to generate the "scanreport" or is it still somewhere on my computer?


    Again thanks for the help.

  • 21Rouge
    21Rouge ✭✭
    edited August 2007
    Options
    Can you please post the scanreport of the latest scan. To do so go to general,events,use the filter for anti-virus, doubelclick on your last scanreport press on more info.


    Regards


    Niels


    Although I had cleared the log I see that the scan report is still available in c:\documents and settings\allusers\application data\BitDefender\profiles\logs:


    Virus Statistics


    Scan path : C:\


    Folders : 7336


    Files : 598719


    Memory processes scanned : 53


    Archives : 124949


    Runtime packers : 21103


    Identified viruses : 0


    Infected files : 0


    Memory processes infected : 0


    Suspect files : 8


    Warnings : 0


    Disinfected files : 0


    Deleted files : 0


    Moved files : 0


    I/O errors : 27


    Scan time : 01:37:27


    Scan speed (files/sec) : 102


    Spyware Statistics


    Registry keys scanned : 1684


    Registry keys infected : 0


    Cookies scanned : 122


    Cookies infected : 0


    Spyware files infected : 0


    Spyware threats detected : 0


    Virus definitions : 809122


    Scan plugins : 16


    Archive plugins : 40


    Unpack plugins : 6


    Mail plugins : 6


    System plugins : 5


    Virus scan options


    Detection


    [X] Scan boot sectors


    [X] Memory Processes


    [X] Scan archives


    [X] Scan runtime packers


    [X] Scan email


    File mask


    [ ] Programs


    [X] All files


    [ ] User defined extensions:


    [ ] Exclude extensions: ;


    Action


    Infected objects


    [ ] Ignore


    [X] Disinfect


    [ ] Delete


    [ ] Move to quarantine


    [ ] Prompt user


    Second action


    [ ] Ignore


    [ ] Delete


    [X] Move to quarantine


    [ ] Prompt user


    Virus scan options


    [X] Enable warnings


    [X] Enable heuristics


    [ ] Show all files in log


    [X] Report file: C:\Documents and Settings\All Users\Application Data\Bitdefender\Desktop\Profiles\Logs\deep_scan\1187734134.log


    Spyware scan options


    [X] Scan for riskware


    [ ] Skip dial and applications from scan


    [X] Registry keys


    [X] Cookies


    Summary:


    C:\Documents and Settings\D\Desktop\Email Backup June 25 2006\Sent Items.dbx=>(message 4213)=>[subject: Re: Abort Report][Date: Fri, 19 Sep 2003 17:11:31 -0400]=>(MIME part)=>(message body) Suspect: Exploit.Iframe.Vulnerability


    C:\Documents and Settings\Dl\Desktop\Email Backup June 25 2006\Sent Items.dbx=>(message 5047)=>[subject: Re: MS office][Date: Thu, 5 Jun 2003 18:57:05 -0400]=>(MIME part)=>(message body) Suspect: Exploit.Iframe.Vulnerability


    C:\Documents and Settings\D\Desktop\Old Dell Laptop\Email messages as of S.16 2006\Sent Items.dbx=>(message 4266)=>[subject: Re: Abort Report][Date: Fri, 19 Sep 2003 17:11:31 -0400]=>(MIME part)=>(message body) Suspect: Exploit.Iframe.Vulnerability


    C:\Documents and Settings\D\Desktop\Old Dell Laptop\Email messages as of S.16 2006\Sent Items.dbx=>(message 5100)=>[subject: Re: MS office][Date: Thu, 5 Jun 2003 18:57:05 -0400]=>(MIME part)=>(message body) Suspect: Exploit.Iframe.Vulnerability


    C:\Program Files\Efofex\FXE\FXEquation.DOT Suspect: Macro.VBA


    C:\Program Files\Efofex\FXE\FXEquation97.DOT Suspect: Macro.VBA


    C:\Program Files\Microsoft Office\Office10\Startup\FXEquation.DOT Suspect: Macro.VBA


    C:\Program Files\Microsoft Office\OFFICE11\STARTUP\FXEquation.DOT Suspect: Macro.VBA

  • Niels
    Options

    Hello 21Rouge


    You can also exclude a file then you have to select add file. But be aware that in the free version you don't have realtime protection so you can't use the option to exclude a folder in realtime mode.


    BitDefender just says that these macro's are suspecious. This doesn't mean that they are malicious.


    I suggest that you make a topic in the malware section and archive


    the follow files: FXEquation.dot,FXEquation97.dot in a password protected archive with the follow password:


    infected.


    Glad that I could help you.


    Regards


    Niels

  • 21Rouge
    Options
    BitDefender just says that these macro's are suspecious. This doesn't mean that they are malicious.


    I suggest that you make a topic in the malware section and archive


    the follow files: FXEquation.dot,FXEquation97.dot in a password protected archive with the follow password:


    infected.


    Just an update: I did send the suspicious file off to BD, late yesterday morning. Here is the reply I got a little over 12 hours later:


    We have received the answer from our virus lab analysts, the File


    FXEquation.DOT is declared clean and exception for this type of macro has been


    added.


    About a year ago I had a similar problem with "Freedom's" AV programme ie a false postive on a file. It took almost 3 weeks of emails before they recognized it was clean.

  • Niels
    Options

    Hello 21Rouge


    Good that you have send the samples but the virus researchers check also the malware section on this forum. Here they aren't everyday active.


    Regards


    Niels

  • 21Rouge
    Options

    I notice when there is any BD scan that the Spyware statistics are greyed out. ("Results" and "Time" are black)


    And I have yet to see "Spyware threats detected" to be anything but zero. This doesnt seem likely. :huh:

  • Niels
    Options

    Hello 21Rouge


    So you don't see how many files that are being scanned? But it depends also what kind of scan you have done. Quick scan doesn't scan on spyware so that could clarify why spyware is greyed out.


    You will only see a number when BitDefender detected something as spyware. So it's normal that sometimes you see 0.


    Regards


    Niels

  • 21Rouge
    21Rouge ✭✭
    edited August 2007
    Options
    So you don't see how many files that are being scanned? But it depends also what kind of scan you have done. Quick scan doesn't scan on spyware so that could clarify why spyware is greyed out.


    Here is a screen shot of a full scan. Middle section is greyed out for antispyware porgression. And there isnt one scan I have seen in the past 3 days that shows anything but 0 for "Spyware Threats Detected"


    post-3757-1187983616_thumb.jpg

  • Niels
    Options

    Hello 21Rouge


    That is normal behaviour nothing to worry about. The reason why you didn't see the number changed by spyware threats detected is because there weren't any detected on your system.


    Regards


    Niels

  • 21Rouge
    Options
    Secondly if you are sure these are false positives, send them to BitDefender, they will investigate the file and if it is not a virus they will flag them as beeing clean. The next time you then update your virus definitions the files will no longer be detected as infected.


    It is almost a month later and still these same files are flagged as suspicious macros. I had emailed BD 3 weeks ago and got very prompt emails saying that the files I submitted were clean and very soon BD would pass them by. Three more emails again indicating that all would be fine within 24 to 48 hours and yet now a month later nothing has changed.