I just buy a new HP TX121 today 3in1 printer.
After installing…
Reboot the system…
For about 20mins behavior shield detecting usbstor.sys & NpptNT2.sys.
Usbstor.sys is only detected today after installing my HP TX121 driver.
Btw.
Here is the link for my NpptNT2.sys FP.
http://forum.avast.com/index.php?topic=78259.0
I hope Avast team will fix on behavior shield heuristic detection because im getting 2 FP now.
You can set the behavior shield to Ask and when it pings it next time have it allow and add it to the trusted processes if you are confident that it is clean.
Hi! tnx for the reply.
Sorry but i think their is no allow option?
If i remember only ignore and delete…
I already put NpptNT2.sys on trusted policies on behavior shield but it still detecting it.
I’m missing something?
Then that isn’t the behavior shield but the anti-rootkit scan (8 minutes after boot).
I think you right.
But i do have detection on behavior shield NpptNT2.sys and it still visible on avast graph.
Anyway i now know to prevent behavior shield detecting it NpptNT2.sys.
It seems anti-rookit detecting it.
This is my issues the anti-rookit…
So what to do preventing this 2 types of sys. without fully disable anti-rookit feature?
Tnx for the info.
I’ve seen this before - where the behaviour shield shows a detection but the alert is from the antirootkit. There’s a thread on it - it was a file called cerberus in my case.
If you’re sure the file is clean I guess you could check the box that says do not alert me again and then click ignore in the alert dialog.
That as far as I’m concerned doesn’t resolve the problem, just masks the symptom and I don’t know if there is a way to reverse the decision.
@ AlbelNox
As much of a pain in the rear it might be keep choosing the Ignore option and don’t check the box. How else would you know if it gets resolved. The avast CommunityIQ function should be reporting back these suspicions. I patterns should develop as I doubt you are the only one with this particular problem, that should prompt an investigation.
False Positive - Anti-Rootkit Scanner:
- You can report the problem using the same general email reporting for a false positive. But there is no sample to send as it isn’t the actual file, but the fact that it is a hidden service that is considered Suspicious.
Send the report to virus (at) avast (dot) com giving details of the alert, etc. in email body, a link to this topic might help and false positive anti-rootkit scan in the subject.
Not a problem, me I’m a system control freak and want to know what is going on in my system and when it stops ;D