Author Topic: rootkit infection warning classpnp.sys  (Read 5306 times)

0 Members and 1 Guest are viewing this topic.

paulmars

  • Guest
rootkit infection warning classpnp.sys
« on: December 06, 2011, 06:04:27 PM »
it asks to reboot and do a scan. i say ok, it finds nothing. I continue using computer, awhile later it pops up again warning of this rootkit infection. again it wants to reboot and do a scan. I say ok, again it finds nothing. The next day, it pops up that rootkit warning and wants to do...

u get the idea.

what should I do?

tks,
pa

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88898
  • No support PMs thanks
Re: rootkit infection warning classpnp.sys
« Reply #1 on: December 06, 2011, 06:15:37 PM »
What is your Operating System ?

When was this detected ?
e.g. on an on-demand scan or roughly 8 minutes after boot (anti-rootkit scan, see image example) ?
What is the full path to this file, e.g. c:\windows\system32\drivers\ filename ?

Given the comment that this comes back later I suspect it isn't only the anti-rootkit scan, but also another one of the shields.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

paulmars

  • Guest
Re: rootkit infection warning classpnp.sys
« Reply #2 on: December 06, 2011, 06:35:09 PM »
xp pro sp3

not on a scan, longer then 8 minutes after boot.

c:\windows...\sfloppy.sys

was the 2nd or 3rd. the fist I got was ....classpnp.sys

all ask to reboot and scan and find nothing

tks

Mayflower

  • Guest
Re: rootkit infection warning classpnp.sys
« Reply #3 on: December 06, 2011, 06:55:38 PM »
I got that warning too!

(xp pro sp3)

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88898
  • No support PMs thanks
Re: rootkit infection warning classpnp.sys
« Reply #4 on: December 06, 2011, 07:20:04 PM »
@ paulmars
The VPS 111206-2 should have resolved the sfloppy.sys detection, I don't know if that is also the case for classpnp.sys, but I would suggest that you ensure you have the latest avast VPS version.

Once you have the latest version, reboot and see if anything is is detected, if so report what it was.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

paulmars

  • Guest
Re: rootkit infection warning classpnp.sys
« Reply #5 on: December 06, 2011, 07:52:59 PM »
it says its up to date

111206-2
6.0.1367

paulmars

  • Guest
Re: rootkit infection warning classpnp.sys
« Reply #6 on: December 06, 2011, 08:02:10 PM »
I do have another issue, i dont think it causes this. its to do with email ssl/tsl. i will start a new thread. titled ssl and thunderbird

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88898
  • No support PMs thanks
Re: rootkit infection warning classpnp.sys
« Reply #7 on: December 06, 2011, 08:26:09 PM »
it says its up to date

111206-2
6.0.1367

Then try a repair of avast:
XP - Add Remove programs, select 'avast! Anti-Virus,' click the Change/Remove button and scroll down to Repair, click next and follow.

You may need to reboot after the repair. This has in the past resolved this out of sync issue between reported and actual VPS version.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

paulmars

  • Guest
Re: rootkit infection warning classpnp.sys
« Reply #8 on: December 06, 2011, 08:45:33 PM »
done and fingers crossed.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88898
  • No support PMs thanks
Re: rootkit infection warning classpnp.sys
« Reply #9 on: December 06, 2011, 08:47:53 PM »
Let us know how you get on.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

paulmars

  • Guest
Re: rootkit infection warning classpnp.sys
« Reply #10 on: December 09, 2011, 12:36:06 AM »
so far all is ok, tks again

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88898
  • No support PMs thanks
Re: rootkit infection warning classpnp.sys
« Reply #11 on: December 09, 2011, 01:12:45 AM »
You're welcome.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security