Author Topic: Quarantined file question  (Read 2207 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Quarantined file question
« on: February 08, 2018, 07:17:25 PM »
I have 3 Windows 10 laptops that have Avast for Business Basic Antivirus that today sent me notifications of a Quarantined file - setup.exe.   I happened to be working with one of the the laptops at the time.   The popup warning on the laptop referred to C:\WINDOWS\TEMP\{E6585468-9C7E-4370-AEBB-B396C17FDFBA}\.CR\SETUP.EXE and asked to Quarantine it or other.  Out of curiosity, I browsed to the temp folder but could not see the folder path as stated above.  Can someone explain why that would be?  I went ahead and quarantined it, and it is in the virus chest as threat IDP Generic, infected file Setup .exe.  The laptop was sitting idle at the time and no software was being installed.

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48524
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Quarantined file question
« Reply #1 on: February 08, 2018, 07:38:42 PM »
You can always send it in as a possible false positive and have the Avast lab check the file.
Right click the file in the chest and select submit . . . .


Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

REDACTED

  • Guest
Re: Quarantined file question
« Reply #2 on: February 09, 2018, 09:45:46 AM »
Hey, we are use avast for business and are receiving the same message from all our laptops.
The pc's don't have this message (yet)

I can't submit this as a false possitive (right click and submit doesn't work)

If i try to restore the file isn't in that location anymore.

But when I go to c:\windows\temp i have a folder CR_80E71.tmp
There is a setup.exe file.
Google Chrome Installer

So i guess the .cr\setup.exe is a temp file from the google chrome update process.
I'm not sure, it's just a guess.

Why it goes to Quarantined? And only on the laptops? I don't know.

REDACTED

  • Guest
Re: Quarantined file question
« Reply #3 on: February 13, 2018, 08:21:28 PM »
I had another laptop report the same thing today.  There is no option to submit the file.  I tried both IE and Chrome and right clicking does not display any options for submission. 

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37507
  • Not a avast user
Re: Quarantined file question
« Reply #4 on: February 13, 2018, 08:29:20 PM »