Virus Chest and Exclusions

system · 2015-05-19T10:03:07.000Z

I’ve been an Avast (Internet Security) user for years, but I’m still sometimes confused by the user interface. Today, I was running AutoHotkey and I wanted to get some information on a window for my AHK-script. However, Avast blocked the Autohotkey Windows Spy-program and put it in it’s Virus Chest. After searching the web to find the location of the Virus Chest (Statistics → Component Status → Virus Chest OR Scan → Scan for Viruses → Quarantine (Virus Chest) at the bottom right), I right clicked the AU3_Spy.exe script and selected “Restore and add to exclusions.” The Windows Spy is now no longer blocked. So far so good. However, I have two questions:

When I open the Virus Chest, the AU3_Spy.exe script is still listed, even though I restored it. (Twice, just to be sure.) Refreshing the list doesn’t change anything. Is this normal? It seems to me that the file should be removed once it’s been whitelisted.
- Where can I find the whitelisted files? I expected the program to be listed under Settings → Active Protection → File System Shield → Customize → Exclusions, but its not there.

Hopefully you guys can clear things up for me.

Edit: nevermind about the second question, I’ve just accidentally found an aswer playing around with the settings. The file is listed under Settings → General → Exclusions. I suppose this is where files that are excluded from all shields go, whereas the whitelists under Settings → Active Protection are shield-specific.

Pondus · 2015-05-19T10:16:47.000Z

When I open the Virus Chest, the AU3_Spy.exe script is still listed, even though I restored it.

a copy will remain in chest just in case

using chest https://www.avast.com/en-eu/faq.php?article=AVKB21#artTitle

Asyn · 2015-05-19T10:17:21.000Z

LackoDan post:1:

When I open the Virus Chest, the AU3_Spy.exe script is still listed, even though I restored it. (Twice, just to be sure.) Refreshing the list doesn’t change anything. Is this normal?

Yes, it’s there for your reference. If you don’t need it anymore you can delete it.

system · 2015-05-19T10:28:32.000Z

Great, thanks for the quick responses. I was under the impression that “Delete” would delete the file under it’s original location as well. Should have RTFM.

Asyn · 2015-05-19T10:31:19.000Z

You’re welcome.

Announcements