Managing CyberCapture in Avast Antivirus

CyberCapture is a feature of Avast Antivirus that detects and analyzes rare, suspicious files. If you attempt to run such a file, CyberCapture locks the file from your PC and sends it to the Avast Threat Labs where it is analyzed in a safe, virtual environment.

By default, CyberCapture is enabled to block all unrecognized files to provide maximum protection.

We highly recommend keeping the default settings. However, if you would like to have more control over CyberCapture's behavior, refer to the sections in this article for instructions.

Let us know that you trust a detected file

CyberCapture automatically blocks and denies access to a detected file until Avast Threat Labs complete an analysis of the file. However, you can mark a file as trusted which alerts Avast Threat Labs.

  1. When a file is detected, click More details.
  2. Click I trust this file in the next dialog.
  3. When a notification confirming that you submitted your opinion to Avast Threat Labs appears, click Settings to change the default behavior of CyberCapture.

Once Avast Threat Labs have analyzed the file, a notification about the security status of the file is displayed.

Change the default CyberCapture settings

If you want to have control over detected files, you can set CyberCapture to allow you to decide if a detected file can be run. A detected file is always analyzed in Avast Threat Labs, but this option allows you to use the file during the analysis.

  1. Open the Avast Antivirus user interface and select MenuSettings.
  2. Ensure the General tab is selected, then select the allow me to decide option under Enable CyberCapture. Click OK to update your settings preferences.

Once the allow me to decide option is enabled in CyberCapture settings, you can decide what action should be taken when a file is detected.

Open a file when it has been detected by CyberCapture

  1. When the CyberCapture dialog appears, click More details.
  2. Click Run anyway (not recommended). If you are sure that the file is safe you can untick Upload file to Avast Virus Lab for deep analysis.

The detected program or file opens. Once the analysis is finished, a notification about the security status of the file is displayed. If the Virus Threat Lab analysis shows that the file is malicious, the file will be automatically locked in the Virus Chest. We recommend running a scan to make sure the file didn't cause any damage.

For instructions on how to access the Virus Chest and manage the files stored there, refer to the following article:

Prevent CyberCapture from sending files to Avast Threat Labs

We do not recommend preventing CyberCapture from sending detected files to Avast Threat Labs for analysis, but for specific purposes this option is available. This option works regardless of CyberCapture settings.

  1. When a file is detected, click More details.
  2. Untick the Upload file to Avast Virus Lab for deep analysis option and click OK to confirm.

The detected file is not sent to Avast Threat Labs and a notification about the security status of the file will not be displayed. We recommend using extreme caution with a file that has not been sent to Avast Threat Labs.

Exclude files from CyberCapture scan

We do not recommend excluding files from scanning with CyberCapture. However, this option is available if you need to exclude a file temporarily for troubleshooting purposes.

  1. Open the Avast Antivirus user interface and select MenuSettings.
  2. Ensure the General tab is selected, then scroll to the bottom and click the Exclusions panel to expand the section.
  3. Click the CyberCapture tab and type the path or browse to the file you want to exclude.
  4. Hit Enter on your keyboard or click the Add button. Then click OK to update your settings preferences.

Once the exclusion is set, the file is ignored during CyberCapture scanning.

Disable CyberCapture

We do not recommend disabling CyberCapture. However, this option is available if you need to do it for troubleshooting purposes.

  1. Open the Avast Antivirus user interface and select MenuSettings.
  2. Ensure the General tab is selected, then untick Enable CyberCapture and click OK.

CyberCapture is completely disabled. To enable it again, go to back to MenuSettingsGeneral and tick Enable CyberCapture.

  • Avast Ultimate 18.x
  • Avast Premier 18.x
  • Avast Internet Security 18.x
  • Avast Pro Antivirus 18.x
  • Avast Free Antivirus 18.x
  • Microsoft Windows 10 Home / Pro / Enterprise / Education - 32 / 64-bit
  • Microsoft Windows 8.1 / Pro / Enterprise - 32 / 64-bit
  • Microsoft Windows 8 / Pro / Enterprise - 32 / 64-bit
  • Microsoft Windows 7 Home Basic / Home Premium / Professional / Enterprise / Ultimate - Service Pack 1, 32 / 64-bit
  • Microsoft Windows Vista Home Basic / Home Premium / Business / Enterprise / Ultimate - Service Pack 2, 32 / 64-bit
  • Microsoft Windows XP Home / Professional / Media Center Edition - Service Pack 3, 32-bit

Need additional help?

Contact us
Avast Total Care

Your premium tech support for PCs, printers & more

Call now for a free consultation and subscribe! 1-844-340-9251
devices Get help for all your device problems 24x7
1-844-340-9251