Trojan detected in comodo firewall temp folder.

[Guest]

[Alexei23]

Everytime I run bitdefender it detects trojan.generic.664422 in Comodo\comodo firewall\temp\CPF12F.tmp

Everytime I navigate to this folder through explorer there aren't any files in the folder, and I have my exploerer set to show hidden files.

I am running another scan so I will post the report once the scan is finished.

[Alexei23]

here is the report.


//-----------------------------------------------------------------
//
//   Product BitDefender Free Edition v10
//   Product 10.2
//
//   Created on:   19/09/2009   15:00:51
//
//-----------------------------------------------------------------


Virus Statistics

Scan path   : C:\
      H:\
      L:\
Folders   : 11286
Files   :  289714
Memory processes scanned   : 0
Archives   : 3578
Runtime packers   : 12498
Identified viruses   : 1
Infected files   : 1
Memory processes infected   : 0
Suspect files   : 0
Warnings   : 0
Disinfected files   : 0
Deleted files   : 1
Moved files   : 0
I/O errors   : 32
Scan time   : 01:33:05
Scan speed (files/sec)   : 51

Spyware Statistics

Registry keys scanned      : 0
Registry keys infected      : 0
Cookies scanned         : 0
Cookies infected      : 0
Spyware files infected         : 0
Spyware threats detected   : 0


Virus definitions   : 4225354
Scan plugins   : 17
Archive plugins   : 44
Unpack plugins   : 8
Mail plugins   : 6
System plugins   : 5

Virus scan options

Detection
[X] Scan boot sectors
[X] Memory Processes
[X] Scan archives
[X] Scan runtime packers
[X] Scan email

File mask
[ ] Programs
[X] All files
[ ] User defined extensions:
[ ] Exclude extensions: ;

Action

Infected objects
[ ] Ignore
[X] Disinfect
[ ] Delete
[ ] Move to quarantine
[ ] Prompt user

Second action
[ ] Ignore
[ ] Delete
[X] Move to quarantine
[ ] Prompt user

Virus scan options
[X] Enable warnings
[X] Enable heuristics
[ ] Show all files in log
[X] Report file: C:\Documents and Settings\All Users\Application Data\Bitdefender\Desktop\Profiles\Logs\deep_scan\1253372451.log

Spyware scan options

[X] Scan for riskware
[ ] Skip dial and applications from scan
[X] Registry keys
[X] Cookies


Summary:

C:\Documents and Settings\Acer\Local Settings\Application Data\Comodo\Comodo Firewall\Temp\CPF12F.tmp=>(gzip)=>(Embedded EXE g)   Infected: Trojan.Generic.664422
C:\Documents and Settings\Acer\Local Settings\Application Data\Comodo\Comodo Firewall\Temp\CPF12F.tmp=>(gzip)=>(Embedded EXE g)   Deleted
C:\Documents and Settings\Acer\Local Settings\Application Data\Comodo\Comodo Firewall\Temp\CPF12F.tmp=>(gzip)   Archive repacking has failed (marked actions not taken)

[EricJH]

It is more than likely a false positive. Since it is a temp file of Comodo you might as well delete it. Does that solve the problem?

[Alexei23]

I just realised that there are 2 folders called comodo firewall, one ComodoFireWall (with the empty temp folder) and the other Comodo Firewall with a temp folder with file in it. I have now deleted the offending file and scanned the folder again, and the scan came back clear. 

Is it normal to have two firewall folders in the same root folder with the same temp folder inside?

[Tags:]