Avast.J and Asus.D PUP

[Guest Jakob]

Hello,

one of our Customers has been getting 104 of errors like that, which are currently in quarantine. Is this something to worry about?
I am also wondering where this could come from, Avast is not longer installed.

(I translated part of the error to english)

14.06.2023 10:36:40;Real-Time File Protection;File;C:\Windows\System32\drivers\asw308ee1105cd81dfe.tmp;Win64/Avast.J potentially unsafe application;cleaned by deletion;NT AUTHORITY\SYSTEM;Event occurred while attempting to open the file by the application: C:\Windows\System32\MRT.exe (B621C1EE5E10A1D8BB58543BA1E0F4EF4BAEB85D).;02316DECF9E5165B431C599643F6856E86B95E7C;13.02.2018 08:33:51

 

There are also Errors for Asus.D Pup, which are just shown as warnings.
Similar to this case:
https://www.bleepingcomputer.com/forums/t/782578/win64asuse-pup-flagged-by-eset/

 

"12.04.2023 03:01:04;Real-Time File Protection;File;C:\Windows\SysWOW64\drivers\AsUpIO.sys;Win64/Asus.C potentially unsafe application;retained;NT AUTHORITY\SYSTEM;Event occurred while attempting to open the file by the application: C:\Windows\System32\MRT.exe (19061EA5527C8958827DDE014E53449B217A854F).;8B6AA5B2BFF44766EF7AFBE095966A71BC4183FA;16.03.2015 06:25:21"

"18.04.2023 12:01:32;Real-Time File Protection;File;C:\Windows\SysWOW64\drivers\AsIO.sys;Win64/Asus.D potentially unsafe application;retained;NT AUTHORITY\SYSTEM;Event occurred while attempting to open the file by the application: C:\Windows\System32\WerFault.exe (FE2798137381DAB544E23563D8136CB052B730DD).;92F251358B3FE86FD5E7AA9B17330AFA0D64A705;16.03.2015 06:23:18"

 

Thanks for your responses!

[Marcos 5,259]

You can delete the vulnerable Avast driver. Should you install a current version at a later time, it should no longer install the vulnerable driver.

As for the Asus vulnerable drivers, they are from 2015. Try to find newer drivers and install them or create detection exclusion based on the detection name and path.