funkyy Posted July 26, 2013 Share Posted July 26, 2013 @funkyy: I think, currently, both your tcpip.sys and tcpip.copy files are the same, check it's size, or infact, even their hashes should match. Either way, the file that has automatically appeared might be original, unmodified one. Windows keeps several copies of important files, that it replaces automatically when not found or via SFC /SCANNNOW.The two files (tcpip and tcpip copy) are identical, same size, file version, etc. I enabled hidden file extensions out of curiosity and the first one shows as tcpip.sys....neither of the files is an executable file (good news!!). Until now I have had no further alerts from my AV, Malwarebytes, Spybot. I also had a read about VoodooShield and I have installed it as a second level of protection. Everything seems to be working fine, no suspicious activity and hovering the mouse cursor over the tcpip icon doesn't set off AVG like before. But I'm gonna keep a close eye on things anyway, but I feel quietly confident that it was a false alarm.Once again I thank you guys for your advice and input, it's really very much appreciated. Love this site!!! Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.