Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Possible virus? Need some help.


05 Jul 2012   #1

Windows 7 Home Premium 64bit
 
 
Possible virus? Need some help.

Hey everyone sorry if this is the wrong place to post this but, my BitDefender scan just finished and said it solved one issue, like anyone would do I clicked view to see what it was (thinking it was just cookies or something small like that) but it said it was a keylogger!

I'm very weary of if it actually is a keylogger or if BitDefender just mistook it for something and if it is how long it's been going ect. I'm very good with not downloading anything suspicious or any "key generators" ect. So what is this? Should I be concerned and needing to do something? Here's a picture of the details.



The full directory of where it was found is:
<System>=>c:\windows\microsoft.net\framework\v2.0.50727\vbc.exe *32 [424] (memory dump)

Hope someone can help!

Edit: BitDefender runs automatic deep scans everyday at 4:00 A.M and hasn't found anything before.
Edit2: I scanned the same file/directory on my laptop which also runs Win 7 64bit with BitDefender and Malwarebytes Anti-Malware and nothing showed up from either.

My System SpecsSystem Spec
.

05 Jul 2012   #2

Microsoft Windows 8.1 Pro 64-bit
 
 

Quite honestly, I believe Bit Defender scans too harshly, detecting things it shouldn't. It claims it is just a memory dump. System created. It could be a keylogger, but I doubt it.

Make sure all important updates are installed (Windows update). It was found in the .net framework which have security vulnerabilities without updates. If it is updated already, Then I am almost positive it is a... false positive

Shouldn't Defender ask you before it deletes something? Like disable it first and then prompt?

If you want to check for other viruses and you are doubting Bit Defender, you might scan with this tool: http://www.microsoft.com/security/sc...s/default.aspx, or you could install malwarebytes which should work fine next to any antivirus as an additional scanner: http://download.cnet.com/Malwarebyte...=dl&tag=button
My System SpecsSystem Spec
05 Jul 2012   #3

Windows 7 Home Premium 64bit
 
 

Thanks for the reply DustSailor, and vbc.exe is on my laptop that runs the same version of windows as this one I'm on now and I scanned it with BitDefender and Malwarebytes Anti-Malware and nothing was detected. So would you think it's safe to resume using my computer normally or anything?
More in detail, when BitDefender finished scanning, it said that it was deleted so it's not on my computer anymore, not even in quarantine. Also BitDefender didn't ask me before it was deleted or not. My computer is updated fully as well, and I wasn't sure what you meant by "Then I'm almost positive it is a... false positive" are you meaning it is a keylogger or isn't? Sorry for the blocky-ness of the reply, I was just trying to answer your questions in the response.
My System SpecsSystem Spec
.


05 Jul 2012   #4

Microsoft Windows 8.1 Pro 64-bit
 
 

If Bit Defender deleted it, it is removed and your computer is safe to use. The keylogger wasn't anything to fret about. Even if you got infected, an antivirus should (and did) detect it and stop it. You're good.

If you worry it isn't finding all viruses, once again you can use the two tools i provided just to make sure, but I imagine you're fine just with Defender.
Quote   Quote: Originally Posted by itsjustalogin View Post
I wasn't sure what you meant by "Then I'm almost positive it is a... false positive" are you meaning it is a keylogger or isn't?
I meant that if you had all updates installed, it might have detected a harmless file and deleted it. That is what a false positive is. It detects something as a virus without it actually being one.

BUT that is taking my word against Bit Defender, and I have no way of actually knowing if it was a virus or not. Though the antivirus program scans agressively, I would still trust them as I have yet to find a reason not to. Most likely it was some form of low-end malware that has been removed. Hope this helps
My System SpecsSystem Spec
06 Jul 2012   #5

Windows 7 Home Premium 64bit
 
 

Sorry for all of these questions but the same vbc.exe file is in the x64 directory for microsoft.net framework;
"C:\Windows\Microsoft.NET\Framework64\v2.0.50727\vbc.exe". I scanned that file with both BitDefender and Malwarebytes but it came up clean and since I have BitDefender on my laptop and the same file on there was the same one on here then wouldn't it have shown up as a keylogger on my laptop too?
My System SpecsSystem Spec
06 Jul 2012   #6

Microsoft Windows 8.1 Pro 64-bit
 
 

That is why I told you the first one may be a false positive. Have you scanned your system with that other tool I've given you yet (MS Safety Scannner)? Malwarebytes is especially good at detecting that sort of thing. If nothing is detecting it, you are virus free my friend.

Run this tool to repair any broken system files: SFC /SCANNOW Command - System File Checker - created by Brink

^ Has nothing to do with cleaning out viruses, but it will fix your system files.
My System SpecsSystem Spec
Reply

 Possible virus? Need some help.




Thread Tools




Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 09:42 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33