Choices in Avast

[Helmax]

Hello, I'm just registrated here, because I've a Q: I use Avast Home 4.8, and sometimes, if Avast hit i virus-infected file, I have some choices. But in mostly other scanners, you can ignore AV to do anything with the file, but Avast do the file non-using either I delete, send it to quarantine or just want Avast to ignore it. Someone who know if I can let Avast NOT to make ignored files non-using? Hope this get understandable, since I'm a norwegian man and my english is not the best. 

[Jtaylor83]

Good question. The answer is "First, do not delete, do no harm. Always send the file to the virus chest (quarantine) for further investigation."

[Helmax]

I never delete, but sending to virus chest. But even if I then want to restore to original place, I cannot use that file. It's something Avast do with it, and that is on both my computers.

[DavidR]

There is an option, No Action, but that simply takes none of the other suggested actions, but avast won't let you run what it considers an infected file, so clicking the no action button won't change that.

avast uses exclusions to ignore files, it doesn't however have a one click option to ignore as this could be accidentally clicked with the resultant potential for infection,see below.

The question would be, why would you want to restore an infected file ?

If you feel the detection isn't good then you should confirm the detection is false rather than simply making that assumption.

You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here the URL in the Address bar of the VT results page. You can't do this with the file securely in the chest, you need to extract it to a temporary (not original) location first.

Create a folder called Suspect in the C:\ drive, e.g. C:\Suspect. Now exclude that folder in the Standard Shield, Customize, Advanced, Add, type (or copy and paste) C:\Suspect\* That will stop the standard shield scanning any file you put in that folder. You should now be able to export any file in the chest to this folder and upload it to VirusTotal without avast alerting.

If it is indeed a false positive, see http://forum.avast.com/index.php?topic=34950.msg293451#msg293451, how to report it to avast! and what to do to exclude them until the problem is corrected.

This way it would also benefit all avast users by correcting a detection.

[Helmax]

Ok, so when I choice Virus chest, and then restore from chest to a folder which I make not scanning with Avast, then the file will work as normally? If so, then I got the way. Thanks for answer.

[DavidR]

Extract (copy) from the chest will still be treated and detected as infected and there is only one way round that, an exclusion of a temporary location to allow it to be confirmed (virustotal).

It is important not to restore as that would put it in the original location effectively making the virus active again. You should NOT simply exclude a file that is detected as infected without full investigation.

I take it that the reason is you want to do this is because you think the detection might be wrong ?

If so what is the malware name, the infected file name, where was it found e.g. (C:\windows\system32\infected-file-name.xxx) ? 
Check the avast! Log Viewer (right click the avast 'a' icon), Warning section, this contains information on all avast detections. C:\Program Files\Alwil Software\Avast4\ashLogV.exe

[Helmax]

Well, just now I don't have infected files, but sometimes friends who have keygens or similates said that Avast said it's infected.Maybe tha's right, I don't know.

[DavidR]

There is a high risk of keygens being infected, not to mention any legal/moral issues keygens frequently come with other unwelcome guests, as you aren't going to be able to report that to anyone

This is the reason why any detection should be investigated in full rather than simply excluding it from scans.

[Hally]

Hi DavidR 

There is a high risk of keygens being infected, not to mention any legal/moral issues keygens frequently come with other unwelcome guests, as you aren't going to be able to report that to anyone

This is the reason why any detection should be investigated in full rather than simply excluding it from scans.

I've heard that word - Keygens .. Mentioned quite a lot latley 

What exactly does it mean?
What is a Keygen ?

After reading what you'd said..
I was a bit scared to Google the word 


Thanks! 

[Lisandro]

What is a Keygen ?

Generally, an illegal, cracked, program that generates serial keys for non-free programs.

[Hally]

Hi Tech 

What is a Keygen ?

Generally, an illegal, cracked, program that generates serial keys for non-free programs.

Oh! 

Well..
I certainly understand now.. Why DavidR said what he said.
And why these Keygen things are very likely to carry Malware 


Thanks! .. For helping me understand 

[DavidR]

Yes, when people try to circumvent paying for a program, using either a key-generator (keygen) or a crack, modifying the original program not to require registration/paid for license, etc. there is a high chance it could actually infect your system.

At least you have now learnt a little more to help keep you out of trouble

[Hally]

Hi DavidR  

Yes, when people try to circumvent paying for a program, using either a key-generator (keygen) or a crack, modifying the original program not to require registration/paid for license, etc. there is a high chance it could actually infect your system.

At least you have now learnt a little more to help keep you out of trouble

Yep! ... I've definitely learnt something new today 

Although!
I would never even think of using one of those Kegen things anyway.
Not just because they come filled with Malware
But Because... It's Wrong! 

I guess I would be right in thinking...
Using a keygen is - Immoral, Illegal, Piracy, and classed as Stealing   

Thanks! 

[Avasthigno]

And worst of all the malware is contained by keygen for Avast antivirus. That virus is so terrible that it is hard to imagine.

[Lisandro]

And worst of all the malware is contained by keygen for Avast antivirus. That virus is so terrible that it is hard to imagine.

You can pay the price: buying avast antivirus (if you want, you can use the free version for the same protection) or spending time cleaning the computer... it's up to you.