EICAR-test-files ?

[penguin32]

Recently Bitdefender has started finding EICAR-test-files on my win7 PC in the
C:\windows\Temp\temp00008765\temp00000002\ directory.
It finds a few every day and bitdefender says they have been quarantened. as far as i understand they are virus test files and harmless?

I run commodo firewall and Bitdefender any Ideas on where they are coming from and how to be rid of them?

 

[John Connor]

Are you using the paid version? If so, it looks like you're not alone. https://www.bleepingcomputer.com/forums/t/500458/cant-remove-eicar-test-file/

I always used Bitdefender Free or Immunet.

 

[penguin32]

I am using the free version John.

 

[John Connor]

Weird. I never had that problem. You might want to chime in on their forum and see what's up.

 

[Ketchup]

Makes me wonder if your security programs are clashing. If you remove Comodo for a few days, does BD still still detect the "viruses"?

 

[penguin32]

Hi Ketchup, I have sort of come to the same conclusion, ie that comodo and Bitdefender are not playing nice. As I understand things Bitdefender is antivirus and Comode is Firewall and as such should be able to run together, its not like I am running two antivirus programs. I am not sure I want to Remove Comodo as that would leave me wide open.
I have been trying to back track by restoring to previous images of my system that I have backed up in the past, but have not come to any real conclusions.
So I have gone back to my last saved image updated etc and am now keeping a close eye on bitdefender and the C:\windows\Temp directory.

 

[Ketchup]

Windows firewall will not leave you wide open, which should run once you remove Comodo. It doesn't say "I blocked this" and "I blocked that" on the front page (the info is in there though), but it, in conjunction with a decent router, does I good job IMO.

 

[penguin32]

Bitdefender just found/quarantined another file in C:\windows\Temp\temp00008765\temp00000002. The file type is tmp00000002.16347.gzquar which I take to be the quarantined file. Love to know where these are coming from.
Ketchup I will take your advice and switch off Comodo and leave Windows firewall in charge for a few days

 

[penguin32]

Finally managed to get rid of Comodo but not without a fight. I seems to hide stuff everywhere.
So now to see how bitdefender and windows firewall get on.
Any clues how to clear out COMODo registrey keyes without going through them individualy?

 

[Ketchup]

If it was that much of a fight, and still leaving a visible trace, I would recommend actually recommend re-installing (Not kidding) and install Revo uninstaller. I would recommend using the paid version's free period to remove the program, but the free one may be good enough. When you remove through Revo, it will remove through the built-in uninstaller, then will prompt you to remove all file an registry entries left over.

 

[lxskllr]

For the registry, I'd use ccleaner, but don't do a mass clean. Let it find what it thinks are unused keys, then go through manually and delete the ones you're sure you don't need. It's not a button push solution, but easier than going through regedit.

 

[penguin32]

Where would you go to download a clean copy of ccleaner?
thanks for the help

 

[corkyg]

Try Piriform.

 

[penguin32]

Hi all,
Have downloaded a mobile copy of ccleaner to a usb. Then restored my pc to an earlier image from before I started getting problems with bitdefender and comodo. Them uninstalled comodo and cleaned up the registery with ccleaner, it found quite a lot of refs to AVG and COMODO, but seems to be clean and stable now. Will keep an eye on it for a while.
thanks for the help