IDp.Generic swallowed my logonscript.bat

system · 2017-03-18T17:10:07.000Z

It’s quite remarkable for avast to quarantine a file on a share it doesn’t have delete NTFS permissions to, however, Avast quarantined that file (to the Virus Chest) a week ago, off the \domaincontroller\netlogon share, and will not restore it… I’ve tried multiple times to restore the file. As well, I’ve tried to extract it from the client that quarantined this file (according to the Business Console), and it won’t save it locally.

I need help getting this batch file back as I don’t have a recent backup of it (yes, I’ve corrected mistake in the backup selections already), but need the file back, please).

I’m not even going to ask why it quarantined that file, since it hasnt changed in months, and has been around for years. Obviously, the virus Definitions changed, and there’s some match to your current (or previous) virus definitions.

How can I get my file back?

AAWC

Asyn · 2017-03-18T19:30:41.000Z

You can report a suspected FP here: https://www.avast.com/false-positive-file-form.php

system · 2017-03-18T21:19:57.000Z

Dear Asyn,

Please read my post more thoroughly… If I had my file to post, I might do it… instead of just adding an exclusion to the product and calling it a day. And P.S. I’ve gone down that road before and finally gave up on asking Avast to fix a problem in their definitions. However, I can’t post a file to The Avast website when I can’t get my file back from the Virus Chest.

I know this sounds simple, but I want to get my file out of the Virus Chest… AND IT WONT LET ME.

Please help me get my file out of the Virus Chest.

AAWC

Asyn · 2017-03-18T21:24:53.000Z

Report it from the chest then.
Using the Virus Chest: https://www.avast.com/faq.php?article=AVKB21

system · 2017-03-20T09:45:43.000Z

Thanks for the URL, but I’m not stupid… Ive already tried all that… (Report it from the chest, Restore it from the Chest, Restore it from the Business Console, etc)

I believe the program is not working correctly. Which is why I bugged the forums to begin with. I’ve even tried to restore the file from the AVG Web Business Console.

How do I get my file back? It has to be stored somewhere on the client…

AAWC

Asyn · 2017-03-20T10:13:13.000Z

Strange, contact business support: https://support.business.avast.com/hc/en-us/requests/new

system · 2017-03-22T09:58:21.000Z

I’m having a similar issue, although not with a .bat file. I’ve got whole folders being ignored by the exclusions list and its putting the .exe files into the chest then it wont restore them. Restoring locally produces no errors however it doesn’t complete because nothing is put back. Restoring from the cloud console produces a generic “Error” for any file that I try to restore.

MikeB. · 2017-03-23T14:40:24.000Z

Our network installation .bat file also ended up being quarantined when it hit a particular PC. From that point on, I stopped getting requests for new machines waiting to be activated. Once I restored the .bat file, from the “Virus Chest” activation requests started happening again. My suspicion is this particular PC had an issue, that did not want AVAST to be installed, just somehow triggered the .bat file to be quarantined. If that is true, pretty interesting - but of course it is only a theory.

Manley · 2017-03-28T14:16:01.000Z

Yep, these false positive issues continue with this new Avast client version. I created a batch file on a computer, and Avast is destroying it every single time. And this is after I added exclusions to the local Avast profile. The batch file is swallowed up by IDP.Generic.

Mac · 2017-03-29T21:46:01.000Z

In your console try setting an exclusion, or test with behavior shield disabled.

Announcements