Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Avast thinks nVidia driver package contains a rootkit

21 Jun 2014   #1

Microsoft Community Contributor Award Recipient

Windows 7 64 Bit Home Premium SP1
 
 
Avast thinks nVidia driver package contains a rootkit

Interesting. I ignored it.

*




Attached Images
 
My System SpecsSystem Spec
.

21 Jun 2014   #2

x64 (6.3.9600) Win8.1 Pro & soon dual boot x64 (6.1.7601) Win7_SP1 HomePrem
 
 

Probably a false positive, but why not run TDSSkiller?

Malware Remediation - Scan for Rootkits
or

Kaspersky download site: Anti-rootkit utility TDSSKiller
My System SpecsSystem Spec
21 Jun 2014   #3

Desk1 8 Pro / Desk2 7 Home Prem / Laptop 8.1 Pro all 64bit
 
 

TV some more you can try mate
Best Free Rootkit Scanner and Remover - Avast has one in here too.
My System SpecsSystem Spec
.


22 Jun 2014   #4

Microsoft Community Contributor Award Recipient

Windows 7 64 Bit Home Premium SP1
 
 

Thanks gents.
I believe it to be a false positive too, something for nVidia and Avast to work out.
I ran an Avast boot scan and a full general scan afterward and nothing came up.

But I will run one of those suggested programs too, just to be sure. Not today though, leaving in one hour.
My System SpecsSystem Spec
22 Jun 2014   #5

Windows 7 Professional x64 Sp1
 
 

It most likely is a false positive.


Virustotal is your friend.

Herd protects last known scan of the item commonly found in that location with that name:

Malware scan of nvhda64v.sys (NVIDIA HDMI Audio Driver) a67cfe443588e8d7427b3b7c76d88726ef8b1f3a - herdProtect

All good.

You can use that info to match the md5 and other variables if you are unsure. Although it is possible for malware to lie about its md5 hash. But that's another story.

Also wanted to add, avast starts out with the letters svc in that warning. Avast is telling you it is also running as a service. I am not sure how obvious it is to others so I thought I would add this info just in case.
My System SpecsSystem Spec
22 Jun 2014   #6

Desk1 8 Pro / Desk2 7 Home Prem / Laptop 8.1 Pro all 64bit
 
 

Quote   Quote: Originally Posted by andrew129260 View Post
It most likely is a false positive.


Virustotal is your friend.

Herd protects last known scan of the item commonly found in that location with that name:

Malware scan of nvhda64v.sys (NVIDIA HDMI Audio Driver) a67cfe443588e8d7427b3b7c76d88726ef8b1f3a - herdProtect

All good.

You can use that info to match the md5 and other variables if you are unsure. Although it is possible for malware to lie about its md5 hash. But that's another story.
Good point Andrew had forgotten about them - Virustotal
My System SpecsSystem Spec
22 Jun 2014   #7

Microsoft Community Contributor Award Recipient

Windows 7 64 Bit Home Premium SP1
 
 

Thanks again. I think that is cleared up.
Sorry, no love for either of you due to rep limit.
My System SpecsSystem Spec
22 Jun 2014   #8

Windows 7 Professional x64 Sp1
 
 

I would also make sure to report it to avast as a false positive.

http://www.avast.com/contact-form.php

or post in the forum here:

https://forum.avast.com/index.php?board=2.0
My System SpecsSystem Spec
Reply

 Avast thinks nVidia driver package contains a rootkit




Thread Tools



Similar help and support threads for2: Avast thinks nVidia driver package contains a rootkit
Thread Forum
Solved avast: winsxs rootkit detected. help? System Security
Avast: Windows XP Accounts for Nearly 75 Percent of Rootkit Infections Security News
Avast Found Rootkit - TrustedInstaller.exe System Security
Rootkit found -- avast! 5 System Security
Windows Update bundles driver with software package? Windows Updates & Activation

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 12:05 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33