📜 ⬆️ ⬇️

Kaspersky Anti-Virus update blocks tcpip.sys file

In the morning a friend puzzled with a call with a network problem. As it turned out this time, the teacher Kaspersky. Publish for those who still do not know.

On Friday, October 25, 2013, Kaspersky Lab released anti-virus databases, for which detection of the tcpip.sys system file was mistakenly added. This set of anti-virus databases detected the tcpip.sys file as malicious in Kaspersky Anti-Virus 6.0 for Windows Workstations running Windows 7 Service Pack 1 (32-bit), placed the file in Quarantine and deleted the registry branches that belong to this file.

At 20-00 (GMT +4: 00) on October 25, 2013, Kaspersky Lab released a revised set of anti-virus databases.
')
Kaspersky Lab recommends updating the anti-virus database and apologizes for the inconvenience.

Also, to resolve this problem, use one of the following methods:

Method 1: The computer was not restarted, the network is running:
Update antivirus. Make sure the update has been applied.
Run kaspersky_tcpip_fix.exe with administrator rights.
Check that the tcpip.sys file has been restored to C: \ Windows \ system32 \ drivers.
If the file is not restored, then manually restore it from the product quarantine.
If the network uses special settings (not distributed by DHCP), then:
Run regextr.exe <the path to the backup copy of the SYSTEM registry branch is usually% windir% \ system32 \ config \ Regback \ SYSTEM> <export file name, for example: extract.reg> with administrative rights.
Run (apply) file extract.reg
Reboot.

Method 2: The computer was restarted, the network is not available:
Disable antivirus protection (exclude re-detection).
Run kaspersky_tcpip_fix.exe with administrator rights.
Check that the tcpip.sys file has been restored to C: \ Windows \ system32 \ drivers.
If the file is not restored, then manually restore it from the product quarantine.
If the network uses special settings (not distributed by DHCP), then:
Run regextr.exe <the path to the backup copy of the SYSTEM registry branch is usually% windir% \ system32 \ config \ Regback \ SYSTEM> <export file name, for example: extract.reg> with administrative rights.
Run (apply) file extract.reg
Reboot.
Update antivirus. Make sure the update has been applied.
Enable antivirus protection.


support.kaspersky.ru/tcpip

Source: https://habr.com/ru/post/199322/


All Articles