Posted 09 March 2009 - 04:26 AM
I just installed Avira and I ran a scan in safe mode and everything was fine, but when I tried to do a scan in normal mode my firewall came up with the following warning.
avscan.exe wants to access hard drive directly using device "\??\PHYSICALDRIVEO"
(Because of the way it was written I do not know if the final character was the numeral "0" or the capital letter "O").
Under "where the program is located" it said C:\program files\avira\antivir personal edition classic
The firewall "onlinearmor" said this is unusual and dangerous.
I googled physicaldriveO and it seems to be related to some kind of rootkit.
MBAM runs fine and does not detect anything, in either safe or normal mode.