Rootkit warning during regular scan after using Sandbox

Posted this in the Dutch forum as well, got quite some views but got no replies so far. Hopefully this is at the right spot in this sub-forum.
Searched the forum to find an answer to my problem but found nothing quite the same.

I´m using Avast for quite some time, but started to use the Sandbox only recently to set up a more protected connection for internet banking in Internetexplorer 8 under Vista.
A few days later, after the regular scan, Avast reported a rootkit and advised to carry out a startup scan.
Did this and all seemed to be okay.
Scanned also with other anti/rootkit software…no problems found.

I´ve been using Sandbox now three times in the same setup and encountered the same warning again during the next regular (weekly) scan.
Am I overlooking a setting or making an other mistake or is this behaviour to be expected?
Help greatly appreciated!!! :slight_smile:

Regards, Ron

a screenshot of the avast warning would help :wink:

if you have not rebooted since last popup…right click avast tray icon…show last popup
click the pin in top right corner to make it stay on screen…take screenshot

Hmm, have rebooted and not used Sandbox for three weeks now as I only wanted to use it when doing internet-banking as an extra safeguard and gave up using it.
Would have to use sandbox again and that’s no problem but I wanted to ask here just to make sure I’m not making stupid mistakes before using it again.
So yes, I can do it, but it will take a bit of time because I have to setup the sandbox again, and then do a scan .
Hope to be back later this day.

Grrr…
Ran my internet banking program from within IE8 using the sandbox like I did the other days when I got the warnings.

Maybe it’s because I have not done any transaction while running the program, I had no transactions to be carried out, and just logged in to my account. After looking at some pages I logged off again and then I first ran a quick scan with no result. I then ran the weekly scan… again no result…

I don’t understand. Gave up using sandbox because I got these reports every time I used the program from within the sandbox and now nothing happened.
Only thing I can think of and might make a difference is the fact I made no actual transaction because I had none to make.
I’ll give it another try next time I’ll be using the banking program to make a payment and run it in the sandbox again.

For the time being, thanks for trying to help me out. I’ll be back later this week or next week.