Surrey Dave
|
posted on 6/12/11 at 12:19 PM |
|
|
Avast rootkit warning (sfloppy.sys) False?
Have started my pc's today ,they update Avast as usual , then after a few mins I get a warning about floppy.sys being a rootkit, do I want to
delete and do a boot time scan , have done this but the warning comes back.
Checking on Google it seems a few people have had this on the Avast forum and are calling it a 'false positive', so now I am choosing to
ignore and hope that the next Avast update will sort it.
I'm also running Sophos Anti Rootkit.
Anyone else had this today?
[Edited on 6/12/11 by Surrey Dave]
|
|
|
imp paul
|
posted on 6/12/11 at 12:46 PM |
|
|
i also have had the above today very strange
|
|
britishtrident
|
posted on 6/12/11 at 01:52 PM |
|
|
If you go to the Avira website in the downloads section you will find a free a rescue disk scanner that you download as an ISO and burn to Cd or
DVD. This makes a bootable anti-virus disc based on linux that will allow you to scan the full disk and will detect and clean any root kit.
Avira Virus Rescue Bootable CD/DVD Link
[I] “ What use our work, Bennet, if we cannot care for those we love? .”
― From BBC TV/Amazon's Ripper Street.
[/I]
|
|
Davey D
|
posted on 6/12/11 at 02:18 PM |
|
|
Ive had that problem on one of my machines at work today. sfloppy.sys showing as a possible rootkit. i deleted the file manually, did a few bootup
scans, and updated the avast software. seems to have sorted it :-S
|
|
Surrey Dave
|
posted on 6/12/11 at 02:39 PM |
|
|
System File
Not sure if you should delete the file, it seems to be a Windows system file, on Avast forum they talk about the fault being with Avast giving a
'false positive'.
Just using the Linux scanner mentioned above.
|
|
Davey D
|
posted on 6/12/11 at 05:01 PM |
|
|
Windows automatically replaced the system file after it was deleted
|
|