Author Topic: Failure to clear malware from quarantine  (Read 775 times)

0 Members and 1 Guest are viewing this topic.

Offline Nunzio77

  • Poster
  • *
  • Posts: 427
Failure to clear malware from quarantine
« on: June 29, 2023, 04:46:12 PM »
Sometimes I find that I can't delete all the quarantined malware. Even if you select and delete them, they always remain there. I have to reboot the PC and then redo the malware removal. This doesn't always happen and it doesn't happen for everyone. For example, out of 10 quarantined malware, eight are deleted and two are not. By restarting the PC, these can then be subsequently eliminated.
I don't know if it can be a correct behavior or it's a bug.

I also wonder if it is possible to set the quarantine to empty automatically after a number of days of your choice.

Thank you and good day!
Nunzio
----------------------------
Avast Free - Windows 10 Pro-32 Bit, Intel Core2 Duo CPU T7500, RAM 4 Gb, SDD 512 Gb, ATI Mobile Radeon HD 2400 - Avast Mobile Security Free - Smartphone Android

Offline DavidR

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 89017
  • No support PMs thanks
Re: Failure to clear malware from quarantine
« Reply #1 on: June 29, 2023, 05:00:54 PM »
If you are getting so many hits/detections sent to quarantine I would be looking at my activity as to why you are getting so many detections (on your system) that are sent to quarantine.  Another question would be how did they get on to your system to be detected without the Web Shield getting involved  ?

Personally, I favour manual removal of files in the chest (a protected area, files renamed and encrypted), rather than deleted after X number of days (user set or otherwise.  That way you are in control of removals and may well get a reprieve if it were an FP.

I haven't come across this issue and regular users getting so many hits they even need to consider this action/suggestion. 
Then again it is very rare that a file gets sent to the virus chest and ultimately that usually results in an FP.  I keep one in the Chest just to use for screenshots on actions/options available to users in the virus chest.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Nunzio77

  • Poster
  • *
  • Posts: 427
Re: Failure to clear malware from quarantine
« Reply #2 on: June 29, 2023, 05:03:18 PM »
If you are getting so many hits/detections sent to quarantine I would be looking at my activity as to why you are getting so many detections (on your system) that are sent to quarantine.  Another question would be how did they get on to your system to be detected without the Web Shield getting involved  ?

Personally, I favour manual removal of files in the chest (a protected area, files renamed and encrypted), rather than deleted after X number of days (user set or otherwise.  That way you are in control of removals and may well get a reprieve if it were an FP.

I haven't come across this issue and regular users getting so many hits they even need to consider this action/suggestion. 
Then again it is very rare that a file gets sent to the virus chest and ultimately that usually results in an FP.  I keep one in the Chest just to use for screenshots on actions/options available to users in the virus chest.

Obviously I did some tests by downloading malware from some sites(es.: abuse.ch) and I noticed this.
In the settings I prefer the automatic quarantine, without taking any action on the detection, to avoid any errors in the selection phase.

Thank you and good day!
Nunzio
----------------------------
Avast Free - Windows 10 Pro-32 Bit, Intel Core2 Duo CPU T7500, RAM 4 Gb, SDD 512 Gb, ATI Mobile Radeon HD 2400 - Avast Mobile Security Free - Smartphone Android

Offline DavidR

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 89017
  • No support PMs thanks
Re: Failure to clear malware from quarantine
« Reply #3 on: June 29, 2023, 06:11:40 PM »
If you are getting so many hits/detections sent to quarantine I would be looking at my activity as to why you are getting so many detections (on your system) that are sent to quarantine.  Another question would be how did they get on to your system to be detected without the Web Shield getting involved  ?

Personally, I favour manual removal of files in the chest (a protected area, files renamed and encrypted), rather than deleted after X number of days (user set or otherwise.  That way you are in control of removals and may well get a reprieve if it were an FP.

I haven't come across this issue and regular users getting so many hits they even need to consider this action/suggestion. 
Then again it is very rare that a file gets sent to the virus chest and ultimately that usually results in an FP.  I keep one in the Chest just to use for screenshots on actions/options available to users in the virus chest.

Obviously I did some tests by downloading malware from some sites(es.: abuse.ch) and I noticed this.
In the settings I prefer the automatic quarantine, without taking any action on the detection, to avoid any errors in the selection phase.

I thought that would be the case, but why the hell didn't the Web Shield intervene (or had you switched that off too).  Though enabling the 'Fix Automatically' in Settings > Core Shields Malware - This would effectively disable the Web Shield in the case of detections as there would be no Fix Available (I certainly don't believe it could do that). 

However, based on your use of the product I don't see the request to empty the quarantine after a preset time (to get rid of the malware you downloaded) being one that would regular user would 'need'.

That said why Avast isn't deleting immediately after instructed is something that needs investigation.  Not that I have ever experienced that.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security