Author Topic: Send and analysis of suspicious files  (Read 3088 times)

0 Members and 1 Guest are viewing this topic.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Send and analysis of suspicious files
« on: February 25, 2011, 10:44:03 PM »
I can't read all the forum when I was out, so, sorry to be asking simple questions:

1. Is every file detected as "suspicious" (the "autosandbox" question appears) automatically submitted to avast labs? Or, on contrary, only if the user really sandbox the file that it is submitted.

2. Can we know what were the submitted files (log)?
The best things in life are free.

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11849
    • AVAST Software
Re: Send and analysis of suspicious files
« Reply #1 on: February 25, 2011, 10:50:11 PM »
1. It's up to the virus database to decide what to submit (provided the user has the "community" option enabled). It doesn't have anything to do with the final user's choice (whether to use the sandbox or not). It may also be enabled only on a random fraction of the users (that is, if it doesn't submit anything from you, it doesn't mean there isn't anybody else who gets the submit under the same circumstances).

2. No specific log... maybe the setup.log might contain info on the submissions (but all of them, nothing indicated the connection to autosandbox).

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Send and analysis of suspicious files
« Reply #2 on: February 26, 2011, 02:07:18 AM »
Thanks Igor.
I suppose that, when anything is submitted, it's the full file which is uploaded. Am I right?
The best things in life are free.