bdcore.dll & libfn.dll

A quick scan with avast! shows I have bdcore.dll & libfn.dll. A google search has them as being from BitDefender & also from up to five different spyware.

I do use BitDefender online scanner about once a month. I don’t know who these dlls are from. If they’re from BitDefender then they’re ok, but if spyware I want to remove them. BitDefender doesn’t detect them nor any other malware scanner that I have. Only avast! detects them. Is this a false positive from avast?

http://img206.imageshack.us/img206/7627/20060812130224ru1.png

The location seems to be from online scanners.
Why don’t you resize the ‘Results’ column of that window and let us know exactly what happened?

What do you mean? Did you submit the file to Jotti or VirusTotal (antivirus online scanners)?

This can’t be a false positive - because avast! didn’t report any malware ;D
avast! is just telling you that it wasn’t able to scan those two files; if you resize the second column (with your mouse), you should be able to see the reason.

I went to Jotti, but wasn’t able to find the files. I guess I don’t know how to use Jotti.

I then used XP’s search feature to find bdcore.dll & libfn.dll on my computer. The results were the dlls belonged to BitDefender.

http://img216.imageshack.us/img216/7152/20060812162452rx2.png

Thank you for your help. I should’ve searched my computer first, but anyway maybe this will help someone else that finds these dlls in an avast! scan.

http://img132.imageshack.us/img132/4928/20060812165947uf1.png

You must upload (send the file to them) the file to be tested.
Some computers requires to disable the firewall, others the antivirus…
Are you seeing any error message on sending that file for analysis?

Today isn’t the first time I tried to use Jotti. When I went to Jotti I clicked on “choose” then the pop up window for me to choose a file came up & I couldn’t find C:\WINDOWS\Downloaded Program Files\bdcore.dll I even tried typing C:\WINDOWS\Downloaded Program Files\bdcore.dll into the chosen file window, but when I hit enter a pop up saying “incorrect path” came up. Is there a tutorial on selecting files to enter available on the net. I’m not a wiz on using computers. That is why I often post without checking for myself.

:slight_smile: Hi all :

 I just installed the latest 4.7.871; ran a "Standard" scan
and got the same results as rdmaloy, except it had the 2
 entries twice, making a total of 4 . BitDefender, if I ever
 ran its Online scan, is long gone .

 Igor : seems like a false-positive or something similar that
           should be removed from the programming !?

This is what i’ve experience when beta testing latest avast! version but Vlk couldn’t reproduce it. It was also a BitDefender Online Scan component.
I guess he’ll be interested in this thingie…

Hi RejZoR,

It belongs to a parasite, read here, and how to remove it:
http://www.spywareremove.com/removebdcoredll.html

polonus

It’s not any form of spyware, it’s BitDefender core engine ::slight_smile:
I know what i’ve downloaded…

OK. If you copy the file somewhere else on your disk - do you get the same results when scanning it with avast!?
[Do you actually see the original files on your disk?]

Anybody?

I can’t find a problem with this file… ::slight_smile: ???

:slight_smile: Hi Igor :

 I have used my computer's "Search > All files and folders"
 and using the search "terms" "bdcore" & "libfn" results
 in nothing found . And I have "checked" the "Show Hidden
 Files and Folders" setting .

But you still get the avast! error?
If it’s the case, it seems like some kind of rootkit technology to me… so maybe the files don’t belong to Bitdefender, but rather to some malware, as polonus posted?

:slight_smile: Hi Igor :

 Decided to "experiment", so I ran the Standard Scan & 
 when it finished I had the "bdcore.dll" & "libfn.dll" in the
 "Unable to Scan" and clicked on each one by one, selecting
 "Delete" and they went to the Recycle Bin. Went there &
  emptied it . Several hours later I ran a Standard Scan &
  neither was in "Unable to Scan".
  Do not think a rootkit would be that easily removed !?

OK, I checked a little deeper and found out that it’s really a small glitch in avast! code (the files are not dangerous - they’re just too small).
It will be fixed in the next avast! update.

I too have the same ones!! Thank you!! 60!