Author Topic: FP usbstor.sys & NpptNT2.sys  (Read 5202 times)

0 Members and 1 Guest are viewing this topic.

Offline -Genesis-

  • Sr. Member
  • ****
  • Posts: 286
FP usbstor.sys & NpptNT2.sys
« on: May 20, 2011, 03:18:23 PM »
I just buy a new HP TX121 today 3in1 printer.

After installing...

Reboot the system...

For about 20mins behavior shield detecting usbstor.sys & NpptNT2.sys.



Usbstor.sys is only detected today after installing my HP TX121 driver.


Btw.

Here is the link for my NpptNT2.sys FP.

http://forum.avast.com/index.php?topic=78259.0


I hope Avast team will fix on behavior shield heuristic detection because im getting 2 FP now.
« Last Edit: May 20, 2011, 03:20:44 PM by AlbelNox »
Windows 11 Pro / Windows Defender/
Ryzen 5 1600/ Aorus Gtx 1080Ti Xtreme/ Gskill Trident Z RGB 3000/ Samsung Evo 250GB/ Western Digital Black 1 TB

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: FP usbstor.sys & NpptNT2.sys
« Reply #1 on: May 20, 2011, 05:36:37 PM »
You can set the behavior shield to Ask and when it pings it next time have it allow and add it to the trusted processes if you are confident that it is clean.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline -Genesis-

  • Sr. Member
  • ****
  • Posts: 286
Re: FP usbstor.sys & NpptNT2.sys
« Reply #2 on: May 20, 2011, 06:06:32 PM »
Hi! tnx for the reply.

Sorry but i think their is no allow option?

If i remember only ignore and delete...

I already put NpptNT2.sys on trusted policies on behavior shield but it still detecting it.


I'm missing something?
Windows 11 Pro / Windows Defender/
Ryzen 5 1600/ Aorus Gtx 1080Ti Xtreme/ Gskill Trident Z RGB 3000/ Samsung Evo 250GB/ Western Digital Black 1 TB

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: FP usbstor.sys & NpptNT2.sys
« Reply #3 on: May 20, 2011, 06:26:34 PM »
Then that isn't the behavior shield but the anti-rootkit scan (8 minutes after boot).

Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline -Genesis-

  • Sr. Member
  • ****
  • Posts: 286
Re: FP usbstor.sys & NpptNT2.sys
« Reply #4 on: May 20, 2011, 06:45:07 PM »
I think you right.

But i do have detection on behavior shield NpptNT2.sys and it still visible on avast graph.

Anyway i now know to prevent behavior shield detecting it NpptNT2.sys.


It seems anti-rookit detecting it.

This is my issues the anti-rookit....

So what to do preventing this 2 types of sys. without fully disable anti-rookit feature?

Tnx for the info.

« Last Edit: May 20, 2011, 06:47:57 PM by AlbelNox »
Windows 11 Pro / Windows Defender/
Ryzen 5 1600/ Aorus Gtx 1080Ti Xtreme/ Gskill Trident Z RGB 3000/ Samsung Evo 250GB/ Western Digital Black 1 TB

MAG

  • Guest
Re: FP usbstor.sys & NpptNT2.sys
« Reply #5 on: May 20, 2011, 07:01:21 PM »
I've seen this before - where the behaviour shield shows a detection but the alert is from the antirootkit. There's a thread on it - it was a file called cerberus in my case.

If you're sure the file is clean I guess you could check the box that says do not alert me again and then click ignore in the alert dialog.


Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: FP usbstor.sys & NpptNT2.sys
« Reply #6 on: May 20, 2011, 08:02:17 PM »
That as far as I'm concerned doesn't resolve the problem, just masks the symptom and I don't know if there is a way to reverse the decision.

@ AlbelNox
As much of a pain in the rear it might be keep choosing the Ignore option and don't check the box. How else would you know if it gets resolved. The avast CommunityIQ function should be reporting back these suspicions. I patterns should develop as I doubt you are the only one with this particular problem, that should prompt an investigation.

False Positive - Anti-Rootkit Scanner:
- You can report the problem using the same general email reporting for a false positive. But there is no sample to send as it isn't the actual file, but the fact that it is a hidden service that is considered Suspicious.

Send the report to virus (at) avast (dot) com giving details of the alert, etc. in email body, a link to this topic might help and false positive anti-rootkit scan in the subject.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

MAG

  • Guest
Re: FP usbstor.sys & NpptNT2.sys
« Reply #7 on: May 20, 2011, 08:18:48 PM »
That as far as I'm concerned doesn't resolve the problem, just masks the symptom and I don't know if there is a way to reverse the decision.


Sorry David.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: FP usbstor.sys & NpptNT2.sys
« Reply #8 on: May 20, 2011, 08:24:50 PM »
Not a problem, me I'm a system control freak and want to know what is going on in my system and when it stops ;D
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security