Panda Cloud Pro 1.5.1 - restoring files fom bin

Discussion in 'other anti-virus software' started by Vladimyr, Aug 17, 2011.

Thread Status:
Not open for further replies.
  1. Vladimyr

    Vladimyr Registered Member

    Joined:
    Feb 11, 2009
    Posts:
    461
    Location:
    Australia
    One of my clients has just started using PCA Pro.

    I ran full scan, 2 items (both FPs) were detected, went to the bin to restore them.
    I was a little concerned when the listed files changed colour from green to red and the word "neutralized" and a question mark appeared next to them.
    I clicked on the this and a box appeared with "Unexpected error 11", I cleared the box and now the bin is empty. Is this the way it's meant to work?

    The files are restored but the process is a little scary.
     
  2. The Hammer

    The Hammer Registered Member

    Joined:
    May 12, 2005
    Posts:
    5,619
    Location:
    Toronto Canada
    Process a littler scary? No kidding.:eek:
     
  3. The Hammer

    The Hammer Registered Member

    Joined:
    May 12, 2005
    Posts:
    5,619
    Location:
    Toronto Canada
    Anybody around that can answer the OP's question?
     
  4. Ibrad

    Ibrad Registered Member

    Joined:
    Dec 8, 2009
    Posts:
    1,949
    Hey sorry about that, since school started back up I have been a little more busy.

    Where were these files detected? You happen to have a scan log you can post so I can see where they were detected?
     
    Last edited: Aug 22, 2011
  5. pbust

    pbust AV Expert

    Joined:
    Apr 29, 2009
    Posts:
    1,173
    Location:
    Spain
    Likewise sorry for the late reply, been on vacation.

    As Ibrad said, would be easier to figure out the root of the problem with a log and the files MD5 checksums.

    It seems from the description that what is strange to the user is the user interface effect of selection of row in the report (which turns orange/red when an item is selected).
    Again, could be an issue with the interface design (with the exception of the error of course which we'd need the log and checksums to troubleshoot).
     
  6. Vladimyr

    Vladimyr Registered Member

    Joined:
    Feb 11, 2009
    Posts:
    461
    Location:
    Australia
    I'll be there again on Thursday and see what I can dig up.
     
  7. Vladimyr

    Vladimyr Registered Member

    Joined:
    Feb 11, 2009
    Posts:
    461
    Location:
    Australia
    I've found installation logs in Windows\temp. Where should I find a scan log?
     
  8. Cloud

    Cloud Registered Member

    Joined:
    Feb 1, 2011
    Posts:
    1,030
    Location:
    United States
    Follow the screenshot below. :)
     

    Attached Files:

  9. Vladimyr

    Vladimyr Registered Member

    Joined:
    Feb 11, 2009
    Posts:
    461
    Location:
    Australia
    Thanks for the directions.
    I retested on a fresh install with 'eicar.com'.
    See attached sequence.

    The only disconcerting bit is when the entry turns from green to red. Makes you think something's gone wrong.
     

    Attached Files:

  10. Vladimyr

    Vladimyr Registered Member

    Joined:
    Feb 11, 2009
    Posts:
    461
    Location:
    Australia
    BTW. Got this message and constant 60% CPU today when I tried to open the PCA UI. Rebooting fixed it.
     

    Attached Files:

  11. pbust

    pbust AV Expert

    Joined:
    Apr 29, 2009
    Posts:
    1,173
    Location:
    Spain
    It's red as a warning by design, as you just excluded something which was detected as malware or suspicious, allowing it to run freely.
     
  12. The Hammer

    The Hammer Registered Member

    Joined:
    May 12, 2005
    Posts:
    5,619
    Location:
    Toronto Canada
    So recovering the file does this?
     
  13. pbust

    pbust AV Expert

    Joined:
    Apr 29, 2009
    Posts:
    1,173
    Location:
    Spain
    Yes. This process (ability to recover detected and neutralized files) was implemented mainly because of feedback from advanced users such as yourselves. It basically allows you to recover detected and neutralized files and exclude them from being detected again.

    If you look again in the same entry after recovering a file (the red entry above), you will see a new option to re-detect the file. Choosing this action will instruct the AV to start detecting that specific file again and the entry will turn from red to green.
     
  14. Vladimyr

    Vladimyr Registered Member

    Joined:
    Feb 11, 2009
    Posts:
    461
    Location:
    Australia
    I like the idea that it automatically excludes a manually restored file from being detected again but would prefer an explanation box to tell me that this is what has happened. The correlation of the line turning red and the appearance of the word "excluded" could be interpreted to mean that the restoring of the file had been excluded.

    Are the "unexpected error 11" and reboot required problems I mentioned in any way common?
     
Loading...
Thread Status:
Not open for further replies.