avast deleted .vmdk virtual machine file

hello,
i’m Paolo from italy and i’m looking for help! thank you to everyone

so: vista ultimate
avast: home 4.8

last night i’ve started a virus scan to my notebook and then i go bed.

this morning in the log file of avast i’ve found a .vmdk file sign by virus (trojan)

in my pc the file (20 gb) .vmdk of the vmware vitual machine was desappared!
using a recovery program i have found a file without name and extension, (20gb) but the recovery progam can’t restore (because there isn’t the name)

i don’t know how avast delete the file, someone can explain to me?

Paolo

Do you use the Pro version? If not, you should have answered what to do with the file as avast home does not automatically deal with viruses. I’ve posted a similar false positive yesterday…
http://forum.avast.com/index.php?topic=43301.0

May be a good idea that AVAST makes the product, by default, exclude .VMDK files (and other virtual devices)??

I downloaded AVAST last night to give it a “test drive”… big mistake.

Unfortunately I scanned all the drives.

My V: is dedicated to VMWare (all files including .VMDKs)
My Z: is a RAID-5 backup of all the machines.

Guess what, all DELETED… cannot recovery most of them, tried almost every recovery tool. Managed to get one of the main .VMDK back, totally corrupted.

Totally screwed. My Win 2008 / SQL Server 2008 development server has gone… with months of work. There was me thinking I had backups! Hopefully my off-site backups might have a 1+ old month copy on.

Wasted the whole day just trying to resolve this… all thanks to a trial!

avast 4 or 5 version?

avast 4 does NOT delete any file by its own. You should have set to delete all or configurated the trial to automatic delete. Indeed, the safer is sending to Chest, if the file is too big for the Chest (which I think is the case), it will remain there, blocked (not activated).

I accept that you are not happy though I can’t understand why avast! 4.8 would delete anything unless the user authorises it but your idea is not a good one.

Dear All,

I think i faced with the same problem like you all, this happened more than one time with my VMWARE file .vmdk. Yesterday i lost my file for used to VMWARE :

avast! [User-PC]: File “D:\vmware\XP Pro\Windows XP Professional-000002.vmdk” is infected by “Win32:Dialer-DW [Trj]” virus.
“Resident protection (Standard Shield)” task used
Version of current VPS file is 091018-0, 10/18/2009

avast! [User-PC]: File “D:\vmware\XP Pro\trz423B.tmp” is infected by “Win32:Dialer-DW [Trj]” virus.
“Explorer extension” task used
Version of current VPS file is 091018-0, 10/18/2009

And after i tried to search at Chest and didn’t the file with extension .vmdk. So i couldn’t restore it back.

Regards,
Yanto Chiang

Hope they can help here, I mean, Alwil team.
Strange that the file is “disappearing”.

Which are your version? 4.8 or 5.0.167?

I have the same problem, Avast report virus and deleted my .vmdk file. I tried many recover tool and with no success.
All my work is lost!!!

What i want to say is “FUCK AVAST”
I hate the program and just uninstalled it.

@avast programmers.
Seems there is a “bug” when the automated action is “Send to Chest” and then there is no room for the file.
Instead of remain blocked, the file is being deleted.
Not acceptable.

Tech
Not to hijack this thread but I’ve encountered problems with Avast on VMware Workstation guest when updating VM tools. Last week when updating a Vista one I got a message about a keylogger when I attempted update tools and forgot to turn off Avast shields on guest.
Joe

NO update for the topic?

Deleted files aren’t recoverable.
You need to 1) send to Chest or 2) ignore the alert or 3) exclude .vmdk files from avast scanning.