Author Topic: So suddenly, after an update - Avast Blocked A Vuln. Driver: WinRing0x64.sys  (Read 24644 times)

0 Members and 1 Guest are viewing this topic.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89033
  • No support PMs thanks
Have you read some of the replies above your post as it refers to a vulnerable driver that can be exploited.  Not that it is being exploited and why you aren't getting anything from Trojan killer and Malwarebytes. Not it isn't advisable to run multiple AVs as they can also conflict.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Leo3487

  • Jr. Member
  • **
  • Posts: 64
Not it isn't advisable to run multiple AVs as they can also conflict.

Trojan Killer is a portable AV, to run on demand, and Malwarebytes free version also is on demand

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89033
  • No support PMs thanks
Not it isn't advisable to run multiple AVs as they can also conflict.

Trojan Killer is a portable AV, to run on demand, and Malwarebytes free version also is on demand

That's fine, we do see some that have multiple active AVs, where more isn't necessarily better.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline HnyBear

  • Newbie
  • *
  • Posts: 8
Figure I'd post here as I can't get any help on my own post. Maybe someone will see this and have some ideas.

This has been happening for some time on every reboot. I can't seem to find out what it is or how to get rid of it as the file it points to is never there. The name is always tmp????.tmp the numbers and letters in it are different every time but the tmp part stays the same. I'm on Windows 11 with latest version of Avast One Essential. Any help is very much appreciated.

These pics are old from my old post that's why the dates are so old. Everything is up to date including OS and all drivers.


« Last Edit: March 02, 2024, 08:09:23 PM by HnyBear »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Is Your win11 updated / or try to update ?


Offline HnyBear

  • Newbie
  • *
  • Posts: 8
Is Your win11 updated / or try to update ?

Yes, full updated. Those are old pics from my old post no one ever responded to.

Current Winver 22H2 (OS Build 22621.3155)

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48553
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
What exactly is it that's blocked and have you reported it to Avast as a possible false positive?

Report a false positive (select file or website)
https://www.avast.com/false-positive-file-form.php
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline HnyBear

  • Newbie
  • *
  • Posts: 8
What exactly is it that's blocked and have you reported it to Avast as a possible false positive?

Report a false positive (select file or website)
https://www.avast.com/false-positive-file-form.php

That's the thing, I have no idea what is blocked. It's a random name on every reboot of some *.tmp file that isn't even a driver.

Offline Silviu2

  • Newbie
  • *
  • Posts: 6
hello: 1,run a full system scan,if something is detected remove last but not list,update to windows 11 23H2 have a good ivning

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89033
  • No support PMs thanks
What exactly is it that's blocked and have you reported it to Avast as a possible false positive?

Report a false positive (select file or website)
https://www.avast.com/false-positive-file-form.php

That's the thing, I have no idea what is blocked. It's a random name on every reboot of some *.tmp file that isn't even a driver.


Then what is blocked results in a screen an alert then take a screen capture and select the see Details in the alert, that should show what is responsible for running that .tmp file.  That could be an important clue.

Update after your post - if this resolve it good - if not do as suggested above "take a screen capture and select the see Details in the alert" and attach it here.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48553
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
What exactly is it that's blocked and have you reported it to Avast as a possible false positive?

Report a false positive (select file or website)
https://www.avast.com/false-positive-file-form.php

That's the thing, I have no idea what is blocked. It's a random name on every reboot of some *.tmp file that isn't even a driver.
Send logs to Avast by opening Menu > Settings > Troubleshooting > Send logs to ......


You can include a link to this thread in your report and post the reference number here.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline HnyBear

  • Newbie
  • *
  • Posts: 8
]Send logs to Avast by opening Menu > Settings > Troubleshooting > Send logs to ......


You can include a link to this thread in your report and post the reference number here.

Thank you. Doing that now.