Board logo

Avast rootkit warning (sfloppy.sys) False?
Surrey Dave - 6/12/11 at 12:19 PM

Have started my pc's today ,they update Avast as usual , then after a few mins I get a warning about floppy.sys being a rootkit, do I want to delete and do a boot time scan , have done this but the warning comes back.

Checking on Google it seems a few people have had this on the Avast forum and are calling it a 'false positive', so now I am choosing to ignore and hope that the next Avast update will sort it.

I'm also running Sophos Anti Rootkit.

Anyone else had this today?

[Edited on 6/12/11 by Surrey Dave]


imp paul - 6/12/11 at 12:46 PM

i also have had the above today very strange


britishtrident - 6/12/11 at 01:52 PM

If you go to the Avira website in the downloads section you will find a free a rescue disk scanner that you download as an ISO and burn to Cd or DVD. This makes a bootable anti-virus disc based on linux that will allow you to scan the full disk and will detect and clean any root kit.


Avira Virus Rescue Bootable CD/DVD Link


Davey D - 6/12/11 at 02:18 PM

Ive had that problem on one of my machines at work today. sfloppy.sys showing as a possible rootkit. i deleted the file manually, did a few bootup scans, and updated the avast software. seems to have sorted it :-S


Surrey Dave - 6/12/11 at 02:39 PM

Not sure if you should delete the file, it seems to be a Windows system file, on Avast forum they talk about the fault being with Avast giving a 'false positive'.


Just using the Linux scanner mentioned above.


Davey D - 6/12/11 at 05:01 PM

Windows automatically replaced the system file after it was deleted