Author Topic: About Autosandbox  (Read 4354 times)

0 Members and 1 Guest are viewing this topic.

Coccinelle

  • Guest
About Autosandbox
« on: May 22, 2011, 09:30:36 PM »
Hello Avast Team,
are the autosandbox(Avast Free)work like Comodo Autosandbox.
(I mean White list)
-If this application is not on the white list them run in autosandbox.
Thank you

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11849
    • AVAST Software
Re: About Autosandbox
« Reply #1 on: May 22, 2011, 09:32:40 PM »
No.

Coccinelle

  • Guest
Re: About Autosandbox
« Reply #2 on: May 22, 2011, 09:34:15 PM »
No.
Oh ,why?(I mean if is not the same) Autosandbox can miss. ???
« Last Edit: May 22, 2011, 09:35:47 PM by Coccinelle »

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: About Autosandbox
« Reply #3 on: May 22, 2011, 10:26:45 PM »
Oh ,why?(I mean if is not the same) Autosandbox can miss. ???

What do you mean..???
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: About Autosandbox
« Reply #4 on: May 22, 2011, 10:41:28 PM »
So you would whitelist an infected copy of Adobe ?  A whitelist is based on file name not behaviour.  Sandbox works on behaviour not name

Dch48

  • Guest
Re: About Autosandbox
« Reply #5 on: May 22, 2011, 10:48:33 PM »
Usually an infected copy of a known thing would not match the hash of the file that is whitelisted. Are whitelists done strictly by name or are other checks done?   

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11849
    • AVAST Software
Re: About Autosandbox
« Reply #6 on: May 22, 2011, 10:49:13 PM »
Well, whitelist can be based on many things, certainly not just filename... but still, it would have too many "false positives".

Coccinelle

  • Guest
Re: About Autosandbox
« Reply #7 on: May 23, 2011, 05:24:30 PM »
Ok boys thanks for all.Now i undersend ,but somethimes on the youtube test i see that autosanbox do nothing.For this reason i'm thinking of white list. ???

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: About Autosandbox
« Reply #8 on: May 23, 2011, 05:26:59 PM »
but somethimes on the youtube test i see that autosanbox do nothing.
Sometimes the youtube videos worth nothing...
The best things in life are free.

Sparxx

  • Guest
Re: About Autosandbox
« Reply #9 on: May 23, 2011, 06:18:53 PM »
but somethimes on the youtube test i see that autosanbox do nothing.
Sometimes the youtube videos worth nothing...

Correction - ”Usually youtube videos worth nothing...”  ;D

Nesivos

  • Guest
Re: About Autosandbox
« Reply #10 on: May 23, 2011, 08:04:04 PM »
Well, whitelist can be based on many things, certainly not just filename... but still, it would have too many "false positives".

If the initial white list could be subsequently edited by the user allowing them to remove the false positives the problem would be mitigated.

DarkMasters

  • Guest
Re: About Autosandbox
« Reply #11 on: May 25, 2011, 02:34:54 PM »
but somethimes on the youtube test i see that autosanbox do nothing.
Sometimes the youtube videos worth nothing...

Correction - ”Usually youtube videos worth nothing...”  ;D

Correction - Usually Youtube videos about any antivirus testing are worthless.
I know many people including me who love to download those music videos from Youtube...