Recover Files Deleted by Avast Antivirus

Yes, you can usually recover files deleted by Avast Antivirus, either from the Virus Chest (quarantine) or with a file recovery tool if the file was permanently removed. This article explains the exact steps for both scenarios, how to prevent future deletions, and what to do when recovery seems impossible.

How Avast Deletes Files

Avast Antivirus protects your system by scanning files for malware. When it detects a threat, it typically takes one of three actions:

• Quarantine (Virus Chest): The file is moved to a secure, encrypted folder where it cannot harm your system. This is the default action for suspicious files.
• Delete: The file is permanently removed from your disk. This happens when the threat is severe or when you manually choose “Delete” in the Avast interface.
• Repair: Avast attempts to remove the malicious code and restore the original file. This is rare and only works for certain types of infections.

Files that are quarantined are not truly deleted — they are just relocated. Files that are deleted are gone from the file system, but the data may still exist on the hard drive until overwritten.

Recovering from the Virus Chest

If Avast quarantined the file, recovery is straightforward. Follow these steps:

1. Open the Avast user interface (double-click the Avast icon in the system tray).
2. Go to Protection → Virus Chest (in newer versions, it’s under Menu → Virus Chest).
3. Find the file you want to recover. You can search by name or date.
4. Select the file and click the … (three dots) menu, then choose Restore.
5. If you want to keep the file but exclude it from future scans, choose Restore and add to exclusions.

If the file was quarantined because it was actually infected, restoring it may re-infect your system. Only restore files you are confident are safe (e.g., a false positive).

Recovering Permanently Deleted Files

If Avast permanently deleted the file (or you emptied the Virus Chest), you need a third-party file recovery tool. The key principle: stop using the drive immediately to avoid overwriting the deleted data.

Popular recovery tools include Recuva (free), TestDisk (open-source), and PhotoRec. The general process:

1. Download and install a recovery tool on a different drive than the one where the file was deleted.
2. Run the tool and select the drive or partition where the file was located.
3. Perform a deep scan (this can take hours).
4. Look for the file by name, type, or date. Many tools show a color indicator for recovery likelihood (green = good, yellow = fair, red = poor).
5. Recover the file to a different drive to avoid overwriting.

Success depends on how much new data has been written to the drive since deletion. On an SSD with TRIM enabled, recovery may be impossible because the drive physically erases deleted blocks.

How to Avoid Future Deletions

To prevent Avast from deleting files you need, you can:

• Add exclusions: In Avast, go to Menu → Settings → General → Exclusions. Add specific files, folders, or file extensions that you trust.
• Choose “Ask” action: In Avast’s Protection → Core Shields settings, you can set the action for detected threats to “Ask” so you can decide each time.
• Pause shields temporarily: If you are installing a known safe program that triggers a false positive, pause the shields for a few minutes.
• Regular backups: Use an external drive or cloud backup service. This is the only guaranteed way to recover any file.

Common Problems and Misconceptions

“I emptied the Virus Chest, can I still recover?” Yes, but only with a file recovery tool, and success is not guaranteed.

“Avast deleted my file but I never saw a notification.” Avast may have acted silently if the threat was detected during a background scan. Check the Scan results or Notification history in the Avast interface.

“The file is not in the Virus Chest and my recovery tool can’t find it.” This usually means the data has been overwritten. If the drive is an SSD, TRIM may have already erased the blocks.

“Can I recover a file that Avast deleted from my USB drive?” Yes, the same principles apply, but USB drives are often used on multiple computers, so the data may be overwritten quickly.

Recycle Bin vs. Permanent Deletion

When Avast deletes a file, it does not go to the Recycle Bin — it is permanently removed from the file system. This is a common misconception. The Recycle Bin is only used when you manually delete a file through Windows Explorer. Therefore, you cannot restore Avast-deleted files from the Recycle Bin.

If you are unsure whether a file was deleted by Avast or by yourself, check the Virus Chest first, then use a recovery tool. The sooner you act, the better the chance of recovery.

Frequently Asked Questions

Q: How do I restore a file from Avast’s Virus Chest?
Open Avast → Protection → Virus Chest, select the file, and click the three-dot menu → Restore. If you want to keep it from being flagged again, choose “Restore and add to exclusions.”

Q: Can I recover a file that Avast permanently deleted?
Yes, but only with a third-party file recovery tool. Stop using the drive immediately, scan with a tool like Recuva, and hope the data hasn’t been overwritten. On SSDs, recovery is often impossible due to TRIM.

Q: Why did Avast delete my file without asking?
Avast’s default action for high-risk detections is to quarantine or delete automatically. You can change this by going to Settings → Protection → Core Shields and setting the action to “Ask” for each shield.

Q: How do I stop Avast from deleting a specific program?
Add that program’s folder to the exclusions list in Avast Settings → General → Exclusions. Also, consider reporting the false positive to Avast so they can fix it in future updates.

Q: Does Avast keep a backup of deleted files?
No, Avast does not keep backups. The only copy is in the Virus Chest if it was quarantined. After permanent deletion, the data is only recoverable if the disk sectors haven’t been overwritten.

Q: What should I do if the recovered file is corrupted?
If the file is corrupted, it may have been partially overwritten. Try a different recovery tool or a deeper scan. For important files, always maintain your own backups.

Related

• Dynamic vs Condenser Microphones: Which Should You Get?
• HDMI Cable for Long Distances: What Actually Works
• How to Use How-To Geek’s Holiday Gift Guide