Dear forum users,
while working with MSYS2 (https://www.msys2.org/) Avast put a file (downloaded from the msys2 official archives) in quarantine and notified me with a notification screen. As far as I recall, it notified that it was infected with IDP.Generic; from a short Internet search IDP.Generic may be a false positive, which since the source of the files is safe is very likely.
Using the same notification screen I added an exception and restored the file from the quarantine.
Now I would like to re-check what I did, but I do not recognize the file in the list of exceptions (in the German localization I have it is under Menü->Einstellungen->Ausnahme, the English entry could be Menu->Settings->Exceptions).
Where can I find a log file with this information? I found a log directory with many files at C:\ProgramData\AVAST Software\Avast\log, perhaps it is one of these?
I would be happy to do that, but first I have to figure out which file I removed from the quarantine, and I have lost track of that How can I find out what I did?
Try looking in the Web Shield or File System Shield report files as these are the two most likely shields that would have had an interaction with a file you downloaded from the internet.
C:\ProgramData\AVAST Software\Avast\report
WebShield.txt or FileSystemShield.txt
Use notepad to view as other text editors may not be allowed to open them.
Thanks, it is not there, as the last entry is today at 13:20 and I set the exception at around 19:00.
I have probably found the file — the only file in the msys folder contained in the exception list. Removing it from the list causes Avast to immediately report it as containing IDP.Generic (I have submitted it as false positive).
I would feel more confident of my identification if I could read the adding of the exception in a log file with a time stamp, though, but may be there are reasons why the software does not provide this information to the users—since I am not confident, I am also letting Avast doing a full scan of the computer.
It wasn’t so much the exception I was looking for, but the detection, for the file, etc. that you later set the exception for.
If running a scan - personally I never let Avast (or any security application) remove or take actions autonomously in a scan. Hence my setting scans, etc. to first Ask, I then make the decision what to do.
You should get a response on the possible false positive in a day or two.
How can I find out what I did?