Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: paulmars on December 06, 2011, 06:04:27 PM

Title: rootkit infection warning classpnp.sys
Post by: paulmars on December 06, 2011, 06:04:27 PM

it asks to reboot and do a scan. i say ok, it finds nothing. I continue using computer, awhile later it pops up again warning of this rootkit infection. again it wants to reboot and do a scan. I say ok, again it finds nothing. The next day, it pops up that rootkit warning and wants to do...

u get the idea.

what should I do?

tks,
pa

Title: Re: rootkit infection warning classpnp.sys
Post by: DavidR on December 06, 2011, 06:15:37 PM

What is your Operating System ?

When was this detected ?
e.g. on an on-demand scan or roughly 8 minutes after boot (anti-rootkit scan, see image example) ?
What is the full path to this file, e.g. c:\windows\system32\drivers\ filename ?

Given the comment that this comes back later I suspect it isn't only the anti-rootkit scan, but also another one of the shields.

Title: Re: rootkit infection warning classpnp.sys
Post by: paulmars on December 06, 2011, 06:35:09 PM

xp pro sp3

not on a scan, longer then 8 minutes after boot.

c:\windows...\sfloppy.sys

was the 2nd or 3rd. the fist I got was ....classpnp.sys

all ask to reboot and scan and find nothing

tks

Title: Re: rootkit infection warning classpnp.sys
Post by: Mayflower on December 06, 2011, 06:55:38 PM

I got that warning too!

(xp pro sp3)

Title: Re: rootkit infection warning classpnp.sys
Post by: DavidR on December 06, 2011, 07:20:04 PM

@ paulmars
The VPS 111206-2 should have resolved the sfloppy.sys detection, I don't know if that is also the case for classpnp.sys, but I would suggest that you ensure you have the latest avast VPS version.

Once you have the latest version, reboot and see if anything is is detected, if so report what it was.

Title: Re: rootkit infection warning classpnp.sys
Post by: paulmars on December 06, 2011, 07:52:59 PM

it says its up to date

111206-2
6.0.1367

Title: Re: rootkit infection warning classpnp.sys
Post by: paulmars on December 06, 2011, 08:02:10 PM

I do have another issue, i dont think it causes this. its to do with email ssl/tsl. i will start a new thread. titled ssl and thunderbird

Title: Re: rootkit infection warning classpnp.sys
Post by: DavidR on December 06, 2011, 08:26:09 PM

Quote from: paulmars on December 06, 2011, 07:52:59 PM

it says its up to date

111206-2
6.0.1367

Then try a repair of avast:
XP - Add Remove programs, select 'avast! Anti-Virus,' click the Change/Remove button and scroll down to Repair, click next and follow.

You may need to reboot after the repair. This has in the past resolved this out of sync issue between reported and actual VPS version.

Title: Re: rootkit infection warning classpnp.sys
Post by: paulmars on December 06, 2011, 08:45:33 PM

done and fingers crossed.

Title: Re: rootkit infection warning classpnp.sys
Post by: DavidR on December 06, 2011, 08:47:53 PM

Let us know how you get on.

Title: Re: rootkit infection warning classpnp.sys
Post by: paulmars on December 09, 2011, 12:36:06 AM

so far all is ok, tks again

Title: Re: rootkit infection warning classpnp.sys
Post by: DavidR on December 09, 2011, 01:12:45 AM

You're welcome.