Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: pcclean3453 on April 18, 2011, 12:49:07 PM

Title: avast! wants to auto sandbox popular screensavers in Win7
Post by: pcclean3453 on April 18, 2011, 12:49:07 PM
Why does avast! do this? It's the usual sandboxing message, but I'm starting to wonder if the screensavers are infected somehow?
Title: Re: avast! wants to auto sandbox popular screensavers in Win7
Post by: nmb on April 18, 2011, 01:21:24 PM
Can we get the link to those "popular screen savers" if you have downloaded from the internet? modify the link to hxxp and post.
Title: Re: avast! wants to auto sandbox popular screensavers in Win7
Post by: Dieselman on April 18, 2011, 01:35:14 PM
Exactly.................If its so popular show us a link please.
Title: Re: avast! wants to auto sandbox popular screensavers in Win7
Post by: Lisandro on April 18, 2011, 01:55:02 PM
I'm not having any of the default Win7 screensavers being flagged by the autosandbox.
Probably you're using non standard ones and, maybe, one or another could be suspicious.
You can also submit the *.scr file to www.virustotal.com
Title: Re: avast! wants to auto sandbox popular screensavers in Win7
Post by: Dieselman on April 18, 2011, 02:02:14 PM
Probably something from a site like "free screen savers" which always packs adware into there products.
Title: Re: avast! wants to auto sandbox popular screensavers in Win7
Post by: Asyn on April 18, 2011, 02:05:59 PM
Probably something from a site like "free screen savers" which always packs adware into there products.

Could be. We need a reply from the OP.
Title: Re: avast! wants to auto sandbox popular screensavers in Win7
Post by: igor on April 18, 2011, 02:41:33 PM
If there was an adware included, it would be reported as an ordinary detection (provided it's detected, of course).
I'd say the screensaver executable is packed by a runtime packer - which the heuristics considers suspicious (amongst other things) and offers the sandboxing.
Title: Re: avast! wants to auto sandbox popular screensavers in Win7
Post by: pcclean3453 on April 18, 2011, 10:40:59 PM
Guys, I didn't download it from the internet. It comes with Win7 screensavers.
Title: Re: avast! wants to auto sandbox popular screensavers in Win7
Post by: Asyn on April 18, 2011, 10:54:02 PM
Guys, I didn't download it from the internet. It comes with Win7 screensavers.

Update to the latest version.
6.0.1091 was just released....
asyn
Title: Re: avast! wants to auto sandbox popular screensavers in Win7
Post by: pcclean3453 on April 18, 2011, 10:55:49 PM
I'm updating...
Title: Re: avast! wants to auto sandbox popular screensavers in Win7
Post by: Asyn on April 18, 2011, 10:57:19 PM
I'm updating...

Ok, please report back.
Thanks,
asyn
Title: Re: avast! wants to auto sandbox popular screensavers in Win7
Post by: igor on April 18, 2011, 10:58:17 PM
I somehow don't think a program update would change this behavior...

A default Win 7 screensaver? Which one in particular?
Title: Re: avast! wants to auto sandbox popular screensavers in Win7
Post by: pcclean3453 on April 18, 2011, 11:06:23 PM
Popular Screensavers.
Title: Re: avast! wants to auto sandbox popular screensavers in Win7
Post by: pcclean3453 on April 18, 2011, 11:07:19 PM
Here are the files it said it opened with:

File C:\Windows\SysWOW64\f3PSS


Opened by: C:\Windows\System32\rundll32.exe
Title: Re: avast! wants to auto sandbox popular screensavers in Win7
Post by: pcclean3453 on April 18, 2011, 11:18:01 PM
Update success, by the way.
Title: Re: avast! wants to auto sandbox popular screensavers in Win7
Post by: Dieselman on April 19, 2011, 12:51:44 AM
There is no such thing as Popular Screensavers that come with stock Windows 7. Either someone download it and installed it or it came pre-installed with your computer.
Title: Re: avast! wants to auto sandbox popular screensavers in Win7
Post by: ArtemisF0wl on April 19, 2011, 12:59:01 AM
Here are the files it said it opened with:

File C:\Windows\SysWOW64\f3PSS


Opened by: C:\Windows\System32\rundll32.exe

i have no such file on my pc...  a search for that file name turns up as mywebsearch, although its running from a different location


i think your username may be a bit of a misnomer ;D
Title: Re: avast! wants to auto sandbox popular screensavers in Win7
Post by: Dieselman on April 19, 2011, 01:01:13 AM
Go to xww.popularscreensavers.com . It's an adware infected site.
Title: Re: avast! wants to auto sandbox popular screensavers in Win7
Post by: Lisandro on April 19, 2011, 02:46:04 AM
Go to www . popularscreensavers . com . It's an adware infected site.
If so, please, break the link! Do not post live url of malware.
Title: Re: avast! wants to auto sandbox popular screensavers in Win7
Post by: Dieselman on April 19, 2011, 03:06:19 AM
Tech please think for a minute. I said adware. Not malware. I typed that in on my phone. The site is not maliciously linked but any site such as this is always packed with adware. Usually toolbar stuff.
Title: Re: avast! wants to auto sandbox popular screensavers in Win7
Post by: Lisandro on April 19, 2011, 03:13:00 AM
Adware, for me, is a kind of malware. No live links either imho.
Title: Re: avast! wants to auto sandbox popular screensavers in Win7
Post by: Dieselman on April 19, 2011, 06:23:38 AM
For anyone that doubts me. Popular screensavers will install "My Web Search Toolbar". Its adaware. So Avast was not wrong telling this person that. These screen savers did not come preinstalled either. See my screen shot.Sorry for using ImageShack. Its just easier and quicker.

(http://i54.tinypic.com/2rh43cx.png)
Title: Re: avast! wants to auto sandbox popular screensavers in Win7
Post by: Dieselman on April 19, 2011, 07:21:26 AM
http://www.mywot.com/en/scorecard/www.popularscreensavers.com