Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Bitdefender reporting files, regardless of clean full scan


  • Please log in to reply
11 replies to this topic

#1 Sheepdisease

Sheepdisease

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:07:56 PM

Posted 25 March 2010 - 05:25 PM

Bitdefender is complaining about:

C:\WINDOWS\SoftwareDistribution\DataStore\Logs\tmp.edb
&
wmiprvse.exe

Any ideas?

BC AdBot (Login to Remove)

 


#2 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:07:56 PM

Posted 25 March 2010 - 07:48 PM

What are they being detected as?

#3 Sheepdisease

Sheepdisease
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:07:56 PM

Posted 25 March 2010 - 08:34 PM

File downloader type thing...

#4 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,614 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:12:56 PM

Posted 25 March 2010 - 09:08 PM

Upload both of them here: http://www.virustotal.com/ for security check.

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#5 Sheepdisease

Sheepdisease
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:07:56 PM

Posted 27 March 2010 - 06:29 PM

Posted Image

This prompt came up when I used the website you advised me to visit to scan somes of the files in that directory:
Posted Image

When I tried to scan C:\Windows\SoftwareDistribution\DataStore\Logs\tmp.edb, it reported the file didn't exist!

#6 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,614 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:12:56 PM

Posted 27 March 2010 - 06:44 PM

Disable BitDefender momentarily and try to upload again.

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#7 Sheepdisease

Sheepdisease
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:07:56 PM

Posted 27 March 2010 - 06:48 PM

File not found...

#8 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,614 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:12:56 PM

Posted 27 March 2010 - 07:08 PM

It may be gone then.
Did you manually check C:\WINDOWS\SoftwareDistribution\DataStore\Logs folder?

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#9 Sheepdisease

Sheepdisease
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:07:56 PM

Posted 27 March 2010 - 07:11 PM

Yes, but this keeps happening...

I keep getting prompts about some random looking .exe file accessing tmp.edb, looks malicious to me!

#10 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,614 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:12:56 PM

Posted 27 March 2010 - 07:29 PM

I suggest, you start new topic at "Am I Infected?" forum.

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#11 Sheepdisease

Sheepdisease
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:07:56 PM

Posted 27 March 2010 - 07:49 PM

Done.

#12 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,614 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:12:56 PM

Posted 27 March 2010 - 09:06 PM

OK :huh:

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users