BullGuard quarantines explorer.exe?

I was rather taken aback earlier this morning when a BullGuard pop-up message reported that explorer.exe had been quarantined as a suspect file - I'm running Windows 7 x64 (fully updated) and BIS 16.0.322.1 (latest) by the way. I immediately clicked the link to report it as a false positive, and on re-starting the PC was very relieved that explorer.exe was still in the Windows directory and did not appear to have been quarantined. It does however seem to have had the archive flag re-set. What's going on here?

Moreover, I have set BullGuard to block rather than quarantine suspect files, so why in any case was I getting a report that it had put a file into quarantine?

Hello and thank you for reporting this case.

Please send us your BullGuard Logs, so we can investigate and answer your questions. We will also know if you need to take any action.

To speculate a little, it's likely a Behavioral issue occurred. We will know more from the logs, but BullGuard should in any case leave your explorer.exe unaffected, even if something wants to run from it.

Also, you had the right reaction to report it as a false positive detection as it will be re-investigated.

Regards,

Andreea,

Thanks, that's done - I await a response from Support with interest.

It might be a useful addition to BullGuard if specific files could be identified as 'trusted' by the user in the case of a false positive being flagged, to avoid them being reported again. I know that other AV programs do have such a facility.

I will take your feedback to our managers for consideration for future developments.