False detection on file tcpip.sys at October 25, 2013

[Petrovic]

On Friday, October 25, 2013, Kaspersky Lab has released anti-virus databases, which was mistakenly added detection system file tcpip.sys. This anti-virus databases detected as a malicious file tcpip.sys in Kaspersky Anti-Virus 6.0 for Windows Workstations running under Windows 7 (32-bit), put the file in Quarantine and delete the registry keys that refer to the file.

Our specialist have created the article with solution for this issue.

False detection on file tcpip.sys at October 25, 2013


Additionally, we would like to advise that we have automated solutions for not yet rebooted (the network works) as well as for already rebooted machines (the network is not available).
Please send a private message to (KL CentralSupport user) in order to get this fix.

Please accept our apologies for the inconvenience with the false positive detection of the tcpip.sys.

http://forum.kaspersky.com/index.php?showtopic=277201&hl=tcpip.sys

Method 1:
The computer has not been restarted, the network works:
Update anti-virus databases, make sure it is done and applied.
Run kaspersky_tcpip_fix.exe with administrator permissions.
Check if file tcpip.sys has been restored in folder C:\Windows\system32\drivers.
If file has not been restored, manually restore it from Quarantine.
If your network uses special settings (does not apply through DHCP), then:
Run regextr.exe <path to the backup of the SYSTEM hive – usually %windir%\system32\config\Regback\SYSTEM> <output reg-file e.g. extract.reg> with administrator permissions.
Run (apply) file extract.reg.
Reboot PC.
Method 2:
The computer has rebooted, the network is not available:
Disable anti-virus protection in case to exclude detection of file again.
Run kaspersky_tcpip_fix.exe with administrator permissions.
Check if file tcpip.sys has been restored in folder C:\Windows\system32\drivers.
If file has not been restored, manually restore it from Quarantine.
If your network uses special settings (does not apply through DHCP), then:
Run regextr.exe <path to the backup of the SYSTEM hive – usually %windir%\system32\config\Regback\SYSTEM> <output reg-file e.g. extract.reg> with administrator permissions.
Run (apply) file extract.reg.
Reboot PC.
Update anti-virus databases, make sure it is done and applied.
Enable anti-virus protection.

http://support.kaspersky.com/tcpip