Resolving Threats

 

By default, most threats detected on your device(s) are automatically sent to Quarantine, where you can review and either restore or delete any of them. In case of a false positive detection, you can also send us the related file for analysis or exclude it from future Antivirus scans.

Managing Quarantined Files

Deleting Files

To delete one or more quarantined files:

1. From the client UI, go to Protection > Quarantine

2. Do one of the following:
   • In case of a single file, hover over it, then click the trash bin icon next to it
   • In case of multiple files, tick the checkboxes next to them, then click Delete in the bottom right corner

3. Confirm the action
   • Note that this action is irreversible - the file will be permanently deleted.

Restoring Files

To restore one or more quarantined files:

1. From the client UI, go to Protection > Quarantine

2. Do one of the following:
   • In case of a single file, hover over it, then click the actions menu (three dots) next to it
   • In case of multiple files, tick the checkboxes next to them, then click the actions menu (three dots) in the bottom right corner
3. Choose between the following options:
   • Restore: Restores the file to its original location. Note that this action can pose a high security risk and is only intended for specific situations (for example, if a critical system file is accidentally moved to Quarantine).
   • Restore and add exception: Restores the file to its original location and excludes it from future Antivirus scans (for more information on Antivirus exceptions, see Configuring Antivirus Exceptions).
   • Extract: Restores the file to a location you specify.

Managing False Positives

If you believe Avast Business Antivirus is falsely detecting a file as malicious, we recommend sending the file to us for further analysis. If our Threat Labs specialists confirm a false positive, updating virus definitions should resolve the issue.

There are several ways to send suspected false positives to Avast, one of which is the Send for analysis option in Quarantine. For more information , see Submitting Suspected False Positives.

Alternatively, you can exclude the file from future Antivirus scans using the Restore and add exception option in Quarantine (see section above). Note, however, that this should be done only when you are certain that the file cannot harm your devices.

Managing Unresolved Threats

When a detected threat could not be moved to Quarantine or deleted, running a boot-time scan should resolve the issue. To learn how to set up and perform a boot-time scan, see Scanning Devices.

If the issue persists, try inspecting the infected file manually (advanced users only) or reach out to Avast Business Support.