Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Coccinelle on May 22, 2011, 09:30:36 PM

Title: About Autosandbox
Post by: Coccinelle on May 22, 2011, 09:30:36 PM
Hello Avast Team,
are the autosandbox(Avast Free)work like Comodo Autosandbox.
(I mean White list)
-If this application is not on the white list them run in autosandbox.
Thank you
Title: Re: About Autosandbox
Post by: igor on May 22, 2011, 09:32:40 PM
No.
Title: Re: About Autosandbox
Post by: Coccinelle on May 22, 2011, 09:34:15 PM
No.
Oh ,why?(I mean if is not the same) Autosandbox can miss. ???
Title: Re: About Autosandbox
Post by: Asyn on May 22, 2011, 10:26:45 PM
Oh ,why?(I mean if is not the same) Autosandbox can miss. ???

What do you mean..???
Title: Re: About Autosandbox
Post by: essexboy on May 22, 2011, 10:41:28 PM
So you would whitelist an infected copy of Adobe ?  A whitelist is based on file name not behaviour.  Sandbox works on behaviour not name
Title: Re: About Autosandbox
Post by: Dch48 on May 22, 2011, 10:48:33 PM
Usually an infected copy of a known thing would not match the hash of the file that is whitelisted. Are whitelists done strictly by name or are other checks done?   
Title: Re: About Autosandbox
Post by: igor on May 22, 2011, 10:49:13 PM
Well, whitelist can be based on many things, certainly not just filename... but still, it would have too many "false positives".
Title: Re: About Autosandbox
Post by: Coccinelle on May 23, 2011, 05:24:30 PM
Ok boys thanks for all.Now i undersend ,but somethimes on the youtube test i see that autosanbox do nothing.For this reason i'm thinking of white list. ???
Title: Re: About Autosandbox
Post by: Lisandro on May 23, 2011, 05:26:59 PM
but somethimes on the youtube test i see that autosanbox do nothing.
Sometimes the youtube videos worth nothing...
Title: Re: About Autosandbox
Post by: Sparxx on May 23, 2011, 06:18:53 PM
but somethimes on the youtube test i see that autosanbox do nothing.
Sometimes the youtube videos worth nothing...

Correction - ”Usually youtube videos worth nothing...”  ;D
Title: Re: About Autosandbox
Post by: Nesivos on May 23, 2011, 08:04:04 PM
Well, whitelist can be based on many things, certainly not just filename... but still, it would have too many "false positives".

If the initial white list could be subsequently edited by the user allowing them to remove the false positives the problem would be mitigated.
Title: Re: About Autosandbox
Post by: DarkMasters on May 25, 2011, 02:34:54 PM
but somethimes on the youtube test i see that autosanbox do nothing.
Sometimes the youtube videos worth nothing...

Correction - ”Usually youtube videos worth nothing...”  ;D

Correction - Usually Youtube videos about any antivirus testing are worthless.
I know many people including me who love to download those music videos from Youtube...