Author Topic: Avast! is being recognized as rootkit by RootRepeal  (Read 1846 times)

0 Members and 1 Guest are viewing this topic.

windozer

  • Guest
Avast! is being recognized as rootkit by RootRepeal
« on: April 07, 2011, 01:05:43 PM »
Hello, just to let developers and users know:

Avast itself is being detected as a rootkit by RootRepeal. I had reinstalled my system after RootRepeal found a bunch of hooked *.dll files and a hidden atapi.sys. I thought I have TDL4. But it turned out that it was a false positive because of Avast being installed on the system.

Here is my original thread from sysinternals forum:
http://forum.sysinternals.com/topic25348_post127401.html

I'm glad I figured this out, because I became totally paranoid and thought my computer is part of a botnet. I hope this information is helpful to others. And I hope that developers will inform users about this or post it in the FAQ or help section, or maybe they give a hint about this issue during installation (e.g. "Hint: Because of its scanning techniques, Avast Antivirus may be detected as a rootkit by some rootkit scanners, such as RootRepeal for example. In case you have doubts about specific files on your computer, please refer to the Avast forum in order to check if they are related to Avast Antivirus.")

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Avast! is being recognized as rootkit by RootRepeal
« Reply #1 on: April 07, 2011, 01:28:45 PM »
windozer, thanks for posting.
Indeed, cross scanning could get to false positives.
The best things in life are free.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Avast! is being recognized as rootkit by RootRepeal
« Reply #2 on: April 07, 2011, 03:07:19 PM »
Just to set this clear: avast! does not! install any rootkits..!!! ;)
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0