Author Topic: False positive quarantined w/o confirmation and won't restore.  (Read 1768 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
False positive quarantined w/o confirmation and won't restore.
« on: December 06, 2017, 09:16:57 PM »
I ran a DOS batch file I created myself. Avast Free flagged it as "potentially dangerous" and quarantined it w/o asking me to confirm first.  >:(

Then, when I go into the Virus Chest to restore the file, click the arrow next to the Delete button to change it to "Restore", nothing happens. The button doesn't change. The file does not restore. Fortunately, I saved a copy elsewhere because I can't find the Quarantine folder it was supposedly moved to (I found "C:\Qoobox\Quarantine\", but it does not contain the deleted file. Nor does the folder AVF was installed to.)

And adding files to the Exclusion list is FAR too complicated to prevent this from happening again (I eventually found it under "Settings | General | Exclusions".)

Not good. Please fix this.

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48588
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: False positive quarantined w/o confirmation and won't restore.
« Reply #1 on: December 06, 2017, 09:19:49 PM »
When you restore a file, it's restored to it's original folder but, a copy is kept in the virus chest.
That's sometimes mistaken as no action. :)
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v24H2 64bit, 32 Gig Ram, 1TB SSD, Avast Free 24.4.6112, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

REDACTED

  • Guest
Re: False positive quarantined w/o confirmation and won't restore.
« Reply #2 on: December 06, 2017, 09:21:22 PM »
No option to Restore is offered (as stated.) Trying to change the button from "Delete" to "Restore" does not work.

Also, trying to add an Exclusion for a single file (vs an entire folder) is even more (unnecessarily) complicated. :(
« Last Edit: December 06, 2017, 09:22:55 PM by Mugsy »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37547
  • Not a avast user
Re: False positive quarantined w/o confirmation and won't restore.
« Reply #3 on: December 06, 2017, 09:28:06 PM »
Quote
   (I found "C:\Qoobox\Quarantine\" 
Have you run combofix ?

Quote
  and quarantined it w/o asking me to confirm first.   
can be changed to ask in avast settings


If you access avast quarantine from right click on avast tray icon, does it work then?

« Last Edit: December 06, 2017, 09:36:14 PM by Pondus »

REDACTED

  • Guest
Re: False positive quarantined w/o confirmation and won't restore.
« Reply #4 on: December 06, 2017, 09:55:37 PM »
Quote
   (I found "C:\Qoobox\Quarantine\" 
Have you run combofix ?

No, and I'm not about to. I might have run it about two years ago.

Quote
  and quarantined it w/o asking me to confirm first.
can be changed to ask in avast settings

I found it, but again, far more complex than it should be. (Settings | Components | Behavior Shield | Customize). Not exactly "intuitive". :/

If you access avast quarantine from right click on avast tray icon, does it work then?

That appears to work. Navigating to the same menu directly through the main menu, doesn't. Odd.

Thx.
« Last Edit: December 06, 2017, 09:58:31 PM by Mugsy »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37547
  • Not a avast user
Re: False positive quarantined w/o confirmation and won't restore.
« Reply #5 on: December 06, 2017, 10:09:10 PM »
Quote
   (I found "C:\Qoobox\Quarantine\"
Have you run combofix ?

No, and I'm not about to. I might have run it about two years ago.   
Well I did not mean you should run it.  I meant qoobox\quarantine belongs to combofix


You  can select in all shield what action to take when detecting

« Last Edit: December 06, 2017, 10:10:47 PM by Pondus »