Author Topic: 4.8.1296 Rootkit Exclusions  (Read 2703 times)

0 Members and 1 Guest are viewing this topic.

Styx

  • Guest
4.8.1296 Rootkit Exclusions
« on: November 27, 2008, 11:36:44 PM »
The Rootkit notifications had been stopped once the Avast4.ini had the exclusion C:\passwo~1.exe; ;
which we never discovered where the ; ; came from as I had only entered the path. At least this worked.

Just updated to 4.8.1296 and the RootKit notification popped up again. I told Avast to IGNORE and DON'T SHOW ME THIS AGAIN. Checked the Avast4.ini and the C:\passwo~1.exe; ; was still in there however
C:\passwords.exe had been added. So it looked like C:\passwo~1.exe; ;C:\passwords.exe

So removed the entire line. Rebooted and Avast then gave the Rootkit notification, so I selected
IGNORE and DO NOT SHOW ME THIS AGAIN and it added C:\passwords.exe to the Avast4.ini.

So far after several reboots the issue has not come back.

Shields - Custom - Advanced has C:\passwords.exe  and Settings - Exclusions has C:\passwo~1.exe
both of which were as I had originally entered them and these had not changed.
« Last Edit: November 27, 2008, 11:40:50 PM by Styx »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89059
  • No support PMs thanks
Re: 4.8.1296 Rootkit Exclusions
« Reply #1 on: November 27, 2008, 11:48:30 PM »
Thanks for the update, looks like they have been doing some correction with the anti-rootkit exclusion, fingers crossed this is it sorted. Just looks like it didn't have an element to clean up after the previous clutch in avast4.ini.

I wouldn't have expected it to remove either the standard shield or program settings exclusions lists.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Styx

  • Guest
Re: 4.8.1296 Rootkit Exclusions
« Reply #2 on: November 28, 2008, 02:48:50 AM »
Yes however it is further proof that the entries in Shields - Custom - Advanced and
Settings - Exclusions do NOT effect the Rootkit detection/notifications.