CyberCapture false positive - file not showing in chest and no log.

CyberCapture scanned a program I had attempted to run, and I received a message saying “This file is malicious”. The popup says it was moved to the virus chest, and includes a link for more details. Clicking that link does nothing, and the file is not listed in my chest. I cannot find any record of Avast doing anything, other than the last popup message.

I have since disabled CyberCapture, but is there any way to get this file back?

Mauron, I’ve escalated your issue to the developers. Hope they can give us some clue about what is happening.

Hello,
do you have some files in the chest already? How big are the files in the chest? How big is the file which should be sent to the chest? What is your size limit for the chest.

Milos

There are files in the chest, mostly small attachments from emails. I did see a couple larger ones, one of which was about 200MB. I didn’t see a way to check the total size of all files, so I’m not sure exactly.

I don’t have the exact size of the file that should have been sent, but I’d estimate it was somewhere around 100-200 KB. The chest size limit is 256MB.

Hello,
thank for the info, if you change the Chest size limit to 0 (which means unlimited = limited to free disk size :wink: ) does it help? Or are the files still deleted instead of moved to chest? Also check a settings for actions in FileSystem Shield when some file is detected if there is first action set to “move to chest”.

Milo

Adjusting the chest size limit seems to allow me to add files now, but is there anything I can do about the file that was falsely labeled as malicious?

Hello,
yes, you can send it through https://www.avast.com/false-positive-file-form.php

Milos

The file is no longer in its original location, nor is there a copy in my virus chest. It is unlikely that I will be able to replace it.

Is there a chance of file recovery software can locate the deleted file, or did Avast take steps to prevent that?