Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Mayflower on May 03, 2012, 01:57:22 PM
-
Avast didn´t recognize latest LibreOffice update.
However, Avast started to analyze LibreOffice.
-
What do you mean by "Avast didn´t recognize latest LibreOffice update" ?
I'm mean why would if even have to 'recognise' it specifically or any other update for that matter.
-
Usually ”normal” program updates do not make Avast to ”react”, then running the newly updated program.
This time Avast wanted to run LibreOffice in it´s sandbox.
-
A lot depends on where you tried to run the update from and if the file was digitally signed, etc. The more hits it would get on the things that the autosandbox is looking at (see image) the greater likelihood that it will recommend it be run in the sandbox.
####
The autosandbox process is controlled in the first instance by the file system shield (FSS), the suspect.exe file is scanned before it is allowed to run. If it were infected, it could/should be detected by the FSS, so one reasonable thing in its favour is it hasn't had a definitive detection.
However, the FSS checks other things amongst those a) is the file digitally signed, b) its location and what it does (this is done in the emulation check). these can trigger a suspicion and it is this suspicion that results in the recommendation to use the autosandbox.
Now the user can accept this decision and run it in the autosandbox or have it run normally and to Remember the answer for this program. Provided of course you are familiar with the program and that it is clean and of course that you intentionally initiated the program.
-
Thanks :)
-
You're welcome.
-
Just a quick note to let you know that currently (at this time I mean) Math (LibreOffice 3.5.3) triggers the Autosanbox because the file prevalence/reputation is low. This morning the same happened with Draw (LibreOffice 3.5.3).
As for Math, I guess the Autosanbox recommendation will disappear in the next few days.