Actions Dialog Question

Do the Actions dialogs change depending on what type of detection triggers the dialog? For example, in this post for a “Suspicious Files Found” detection, I see that there is an option in the drop-down to Ignore the detection and a convenient check box to add the detection to the exclusions.

http://forum.avast.com/index.php?action=dlattach;topic=54727.0;attach=42973;image

However, when a “Virus Found” detection is triggered on my system, there are no options to Ignore or exclude the detection.

http://i45.tinypic.com/2evu8zq.jpg

Is this by design or am I missing a way to enable these options?

I believe you just press the X in the corner to ignore it. I’m not sure about this so don’t hold me to it ;D

I’m not 100% sure either but I think it’s reasonable that different threats would call for different options. If avast! flags something as a virus you probably wouldn’t want to just ignore it. If it’s only suspicious it’s probably not as much of a threat, but still a good idea to check it out in my opinion.

go with what Norel said he is most likely right.

Yes, the actions window does change for the different scanners the first being the anti-rootkit scan and unlike the other scanners it is using different detection methods (as the message states) and unlike the other scanners this one isn’t alerting on a detection but a suspicious file (a driver).

So care has to be taken on this as deletion or attempted any other action in normal scanner alerts could harm the computer. That is why the default is Ignore and I believe that info on the detection/alert are uploaded to avast. Personally I would never suggest that you check the ‘Do not tell me about these files in the future,’ as painful as constant warnings go. So you should leave it at the default action, Ignore and click OK.

Now for the good news, I believe that the hardlock.sys has been acknowledged as a false positive and should be corrected in a future update, etc. This is why not checking the ‘Do not tell me about these files in the future’ option comes into its own as when you no longer receive the warning the detection has been corrected.

I wish the PUP detections had the same options as the suspicious files alerts. I use a few PUPs and it would be much easier to set the exclusion via the alert dialog. Thanks for the confirmation that I wasn’t missing a setting somewhere!

Then why not change the default action, so the first action is Ask ???

This is the file system shield, but you should be able to do that in customizing the on-demand scans I think.

I’d say that’s exactly the place (the “Ask” dialog for PUP detection) where the exclusion link is missing (and I think it should be there).
When a real action is selected (such as “Move to Chest”), the link is there - in the popup that appears.

I have “Ask” selected as the first option for Virus, PUP, and Suspicious in the File System Shield. :slight_smile: I’m not concerned about the on-demand scans, just the File Shield.

@Igor: When you say that you think the exclusion link should be there, does that mean that you may add it to the PUP dialog in the future? If so, that would be great! I tried changing the first action to “Move to Chest” and you’re right, there is an option to add the file to the exclusions in that dialog. I never would have noticed that! I think I’m going to stick with the “Ask” as my first option and hope the exclusion option is added to the dialog in a future build. Thanks for the information!