bdcore.dll & libfn.dll

[rdmaloyjr]

A quick scan with avast! shows I have bdcore.dll & libfn.dll.  A google search has them as being from BitDefender &  also from up to five different spyware.

I do use BitDefender online scanner about once a month.  I don't know who these dlls are from.  If they're from BitDefender then they're ok, but if spyware I want to remove them.  BitDefender doesn't detect them nor any other malware scanner that I have.  Only avast! detects them.  Is this a false positive from avast?

[Lisandro]

I do use BitDefender online scanner about once a month.

The location seems to be from online scanners.
Why don't you resize the 'Results' column of that window and let us know exactly what happened?

Only avast! detects them.  Is this a false positive from avast?

What do you mean? Did you submit the file to Jotti or VirusTotal (antivirus online scanners)?

[igor]

This can't be a false positive - because avast! didn't report any malware
avast! is just telling you that it wasn't able to scan those two files; if you resize the second column (with your mouse), you should be able to see the reason.

[rdmaloyjr]

I went to Jotti, but wasn't able to find the files.  I guess I don't know how to use Jotti.

I then used XP's search feature to find bdcore.dll & libfn.dll on my computer. The results were the dlls belonged to BitDefender.



Thank you for your help.  I should've searched my computer first, but anyway maybe this will help someone else that finds these dlls in an avast! scan.

 

[Lisandro]

I went to Jotti, but wasn't able to find the files.  I guess I don't know how to use Jotti.

You must upload (send the file to them) the file to be tested.
Some computers requires to disable the firewall, others the antivirus...
Are you seeing any error message on sending that file for analysis?

[rdmaloyjr]

Today isn't the first time I tried to use Jotti.  When I went to Jotti I clicked on "choose" then the pop up window for me to choose a file came up & I couldn't find C:\WINDOWS\Downloaded Program Files\bdcore.dll  I even tried typing C:\WINDOWS\Downloaded Program Files\bdcore.dll into the chosen file window, but when I hit enter a pop up saying "incorrect path" came up.  Is there a tutorial on selecting files to enter available on the net.  I'm not a wiz on using computers.  That is why I often post without checking for myself.

[Spiritsongs]

   Hi all :

     I just installed the latest 4.7.871; ran a "Standard" scan
    and got the same results as rdmaloy, except it had the 2
     entries twice, making a total of 4 . BitDefender, if I ever
     ran its Online scan, is long gone .

     Igor : seems like a false-positive or something similar that
               should be removed from the programming !?

[RejZoR]

This is what i've experience when beta testing latest avast! version but Vlk couldn't reproduce it. It was also a BitDefender Online Scan component.
I guess he'll be interested in this thingie...

[polonus]

Hi RejZoR,

It belongs to a parasite, read here, and how to remove it:
http://www.spywareremove.com/removebdcoredll.html

polonus

[RejZoR]

It's not any form of spyware, it's BitDefender core engine
I know what i've downloaded...

[igor]

OK. If you copy the file somewhere else on your disk - do you get the same results when scanning it with avast!?
[Do you actually see the original files on your disk?]

[igor]

Anybody?

[Lisandro]

I can't find a problem with this file... 

[Spiritsongs]

   Hi Igor :

     I have used my computer's "Search > All files and folders"
     and using the search "terms" "bdcore" & "libfn" results
     in nothing found . And I have "checked" the "Show Hidden
     Files and Folders" setting .

[igor]

But you still get the avast! error?
If it's the case, it seems like some kind of rootkit technology to me... so maybe the files don't belong to Bitdefender, but rather to some malware, as polonus posted?