Suspected FPs: Uploading from Vault

[DavidR]

And, btw, any Add Exclusion I used for Cyberlink and other programs don't appear in any Exclusions list that I can find.

If you are using the Add to Exclusions option in the alert window, that may be recorded elsewhere. Otherwise it should be in the avastUI > Settings > General - scroll down to and expand the Exclusions section > Hardened Mode tab. If it isn't there try manually setting the exclusion there.

[REDACTED]

Thanks, yes, Hardened Mode tab I didn't notice before.
There's a few exclusions for Cyberlink program components there.

It still happens tho that every install of updates and first launch thereafter requires adding exclusions all over again.

I think I'll take your advice and switch off Hardened Mode for next time.

Cheers.

[DavidR]

You're welcome.

[REDACTED]

One more thing, to answer my own question.

Because I'm on a different machine where I'm sure I haven't touched this setting, default Web Shield action for PUPs is Abort Connection - same for Suspicious.

[DavidR]

The web shield effectively has only one option, Abort Connection - whilst there is Ask the only option in Ask is Abort Connection.

I have all of my shields 1st option set to Ask as I want to be in control of any action taken, even if it is the web shield, it gives me time to gather any analysis information before Aborting the Connection.