Author Topic: avast! blocking and quarantining pCloud client app  (Read 2522 times)

0 Members and 1 Guest are viewing this topic.

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
avast! blocking and quarantining pCloud client app
« on: June 26, 2020, 10:00:00 AM »
https://www.pcloud.com/download-free-online-cloud-file-storage.html

I've tried updating pCloud Windows 10 client yesterday and avast! blocked two things (one in ProgramData\PackageCache and another in .\TEMP\_avast_\unpXXXXXX.tmp) in the installer with Behavior Shield and one component (cbfsinstall.exe as Dyna:Persistence-CU) with DeepScreen.

What's weird is the detection of a file in avast!'s own TEMP unpacking folder. Is that intended behavior now or something weird going on? Certainly false positives that shouldn't have happened.

EDIT:
Moved it here because I somehow managed to post it into BETA section...
Visit my webpage Angry Sheep Blog

Offline fcigoj

  • Newbie
  • *
  • Posts: 1
Re: avast! blocking and quarantining pCloud client app
« Reply #1 on: June 29, 2020, 09:16:42 AM »
I have had the same issue just now, with the result that I am now unable to access my Pcloud folders...very annoying.

Did you find a way around it you are willing to share ?

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: avast! blocking and quarantining pCloud client app
« Reply #2 on: June 29, 2020, 09:34:11 AM »
You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re: avast! blocking and quarantining pCloud client app
« Reply #3 on: June 29, 2020, 05:13:01 PM »
I have had the same issue just now, with the result that I am now unable to access my Pcloud folders...very annoying.

Did you find a way around it you are willing to share ?

I had the same stupid nonsense on 3 systems. Worst of all, DeepScreen says "IGNORED" yet it clearly trashed everything. After long time of not using avast! I had to remove it from all of my systems. It was this annoying. Come on avast! team, you can do better than this.
Visit my webpage Angry Sheep Blog

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re: avast! blocking and quarantining pCloud client app
« Reply #4 on: July 02, 2020, 07:52:28 PM »
Has this been looked into to prevent future breakdown of pCloud installer caused by avast! false detection?
Visit my webpage Angry Sheep Blog

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re: avast! blocking and quarantining pCloud client app
« Reply #5 on: July 04, 2020, 01:11:32 PM »
Seriously, fix this trash. I've dumped avast! on all my systems because of this. You can't even exclude things from stupid DeepScreen and the damn thing even says IGNORED but botches the installer anyway wrecking everything up. Arrgh.
Visit my webpage Angry Sheep Blog

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: avast! blocking and quarantining pCloud client app
« Reply #6 on: July 04, 2020, 04:44:21 PM »
Hi, did you report it..? (Reply #2)
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re: avast! blocking and quarantining pCloud client app
« Reply #7 on: July 05, 2020, 08:18:33 AM »
I've reported it here. The report form wants stupid reCAPTCHA and I don't do those things coz it keeps rolling them billion times for me.
Visit my webpage Angry Sheep Blog

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: avast! blocking and quarantining pCloud client app
« Reply #8 on: July 05, 2020, 01:46:02 PM »
I've reported it here.
Good luck..! ;)
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re: avast! blocking and quarantining pCloud client app
« Reply #9 on: July 08, 2020, 09:17:53 PM »
Come on, this is ridiculous. The "Report as false positive" on DeepScreen popup literally does NOTHING. I was clicking it like mad and just nothing happened. At all. I also can't extract the stupid file from pCloud installer that's triggering the detection as it gets "Ignored" (that's literally DeepScreen's verdict) yet f**ks up the entire installation anyway.

Quote
8. 07. 2020 21:09:43   Autosandbox candidate: C:\ProgramData\Package Cache\F4A595785D327A491C83171BCFA3CCBD2CFE0F39\cbfsinstall.exe
   [Source: local://*C:\Users\RejZoR\AppData\Local\Temp\{6C2C540F-ACB6-48FB-9F57-249DEA2C65B5}\.be\pCloud Drive.exe      ]
   [Opened by: C:\ProgramData\Package Cache\F4A595785D327A491C83171BCFA3CCBD2CFE0F39\cbfsinstall.exe]
   [Reason: 0x00020000]
    --> Result: Sandboxing (file was marked as infected)
    --> Instrumentation: Instrumentation inside sandbox requested

Can someone look at the bloody thing and fix it already?
Visit my webpage Angry Sheep Blog