Deepscreen

[naren17]

I tested Avast & when Deepscreen detects malware it is deleted. Why its not quarantined?
I think it should quarantine the file.

[Lisandro]

The default for files are send to Chest (Quarantine). For websites is drop the connection.
The settings are on: Settings > Active Protection > choose a Module and click the icon > Actions.

[naren17]

I know that.
Every detection is correctly quarantined.

But Deepscreen detection is deleted?

[DavidR]

I have seen another similar topic reporting the deepscreen removing the file.

Not even sure if this was one of yours. But as I have previously mentioned, setting the Hardened Mode to Aggressive may resolve some of these issues as they would first be checked against the avast cloud database. So they may essentially replace the deepscreen function.

[naren17]

I have seen another similar topic reporting the deepscreen removing the file.

Not even sure if this was one of yours. But as I have previously mentioned, setting the Hardened Mode to Aggressive may resolve some of these issues as they would first be checked against the avast cloud database. So they may essentially replace the deepscreen function.

I guess I have posted it earlier too.

Do you mean Avast doesn't contact its cloud database in defaults? Dont you think Avast should connect to cloud database with regular default settings too as most use defaults & will also help in reducing FPs?

And hope Devs change the action of Deepscreen from delete to quarantine.

[DavidR]

As an avast user I have no power over default actions, but I would expect it to have very similar action of the file system shield (FSS) and that has multiple options on actions to take depending on the detection type (Virus/PUP/Suspicious).

So it is somewhat different to the deepscreen function, which may be called by the FSS and the file wouldn't be scanned unless it was an unknown file. In order to say if 'it is an unknown file,' I guess that it would have to refer to the avast cloud database.

[naren17]

Programs excluded in Deepscreen are scanned by Fileshield?

[naren17]

OK, program excluded in Deepscreen are not scanned.

It would be good if DS allows instead of exclude coz if the program is malicious, can be detected later.

[naren17]

Today tested Avast & new findings with Deepscreen.
In todays test saw new Deepscreen action.
DS deleted malware - I have already mentioned in this thread.
DS quarantined malware - This was new.
DS alert mentioned ignored & below it mentioned threat was detected & blocked - This was new & confusing. I ran that sample again & DS quarantined this time, strange?

[true indian]

DS alert mentioned ignored & below it mentioned threat was detected & blocked - This was new & confusing. I ran that sample again & DS quarantined this time, strange?

Good work naren!! I have noticed that too very often.We should get pk or someone to comment on this.