Author Topic: PrintConfig.dll quarantined?  (Read 1883 times)

0 Members and 1 Guest are viewing this topic.

Offline KDibble

  • Sr. Member
  • ****
  • Posts: 229
PrintConfig.dll quarantined?
« on: August 11, 2022, 04:27:06 PM »
Avast Business Pro with the on-premises console.

Program version: 22.4.2699
Pattern file: 220811-4 (or perhaps 3; didn't check the particular machine)

Any idea why some unknown Avast shield would quarantine:

c:\Windows\System32\spool\drivers\x64\Old\1\PrintConfig.dll

The user is working remotely and uses a local USB (not network) printer.

The user was just upgraded from Windows 10 Pro 64-bit 20H2 to 21H2 prior to this event.

The Avast event message does not say what shield detected this and quarantined it. A manual scan was NOT being run at the time.

I can probably get the file and upload it to Avast for analysis but that will take some work, so does anyone have any thoughts on this before I take the time to do that?

Thanks.

Offline KDibble

  • Sr. Member
  • ****
  • Posts: 229
Re: PrintConfig.dll quarantined?
« Reply #1 on: August 11, 2022, 05:40:25 PM »
Okay, I just got a second one of these on another machine that just went from 20H2 to 21H2. I'm guessing these are false positives so I will get a copy of the file and upload it.

Offline LukasJ

  • Avast team
  • Jr. Member
  • *
  • Posts: 86
Re: PrintConfig.dll quarantined?
« Reply #2 on: August 12, 2022, 05:26:00 PM »
Hi, I have located some files using file name and removed a detection, but I am not sure if there was the one you are writing about.
If it is not solved than please send us link to VirusTotal or upload it via false positive form.
Thanks
Lukas