Have switched trying Avast free to Avast Pro for now and I saw a “process virtualization”. Is this sort of a sandbox?
I have Sandboxie 3.5 paid installed and am wondering what is the difference between them(SBIE and Avast’s).
SBIE has a “Drop My Rights” feature, is it the same with Avast or there is a slight difference?
Don’t know if this question is right but…have anyone used a browser in process virtualization alongside a running sandboxed browser?
In SBIE you have to configure where to place items you download, how is it in Avast sandbox?
Please some insights here for I am new to Avast Pro…
Also, I am using Win7 and when I do a manual update Windows 7 gives a pop-up box asking me if the program installed correctly…when I check the update is not reflected but only after a retstart does it shows the correct manual update. Is this so?
Is it okay to delay Avast loading and let Outpost finish first? I seem to have read something about it here somehwere…What is it’s benefits if I do that(pros and cons)…?
Is it advisable to delay it or is it alright as long as it protects me…?
AND,
If there are any Avast Pro settings that you can share with me so I can be more protected, please I’d be glad to hear it from you guys.
I have also excluded Outpost Pro/HitmanPro/Malwarebytes so there would be no conflicts whatsoever. Soon I’ll be adding Prevx(remove HitmanPro).
I was looking for some more tips as the link was too “general” for me as a new user of Avast…
Also along the line of virtualization:
a) can I use more than 1 browser in the proces virtualization as in Sandboxie paid and at the same time run a program inside it also, say, PDF viewer (not in a browser)…?
I am observing that updating Malwarebytes is slow if I do not exclude the URLs for updates of Mbam…while webshield is “on”.
b) I do not use email programs so I am thinking of changing the setup and uninstalling the MailShield. How may I do that? How can I change the setup(custom setup)? When I go to the Control Panel>Uninstall/Change it needs to connect to the internet first…why?
c) How may I save my current settings prior to making changes to the set-up?
d) CanI copy the settings/configuration and store it in a backup folder and use it for future use?
Please bear with me as I do really need to understand the progrm and not just leave it and let it be. I don’t do that. I need to understand it better in order to like it the reason I ask a lot of questions/ideas/help.
Hi, the Process Virtualization is avast’s own sandbox. If you go into the Expert Settings, there should be a tick box that says “automatically detect default locations for saved/downloaded files and save files to these locations outside the sandbox”. With this checked, intentional downloads will not be virtualized/sandboxed. With the option unchecked, intentional downloads will go in the sandbox. Malware that is silently downloaded onto your computer [not intentional] will always be sandboxed, regardless whether this option is checked.
Your other questions:
a) You can run any program (.exe files) in the sandbox, not only browsers. You can use more than one browser in the sandbox. You can right click a program and select “Always run in sandbox” to make it so that it will always run virtualized when you double click to open it.
b) You are doing it the right way. The setup needs to connect to the internet in case you want to install a new feature that you specified to not be included in a previous installation. If you have an account set up for an email program [even if you don’t use it], DavidR suggests that you keep the MailShield in case a Spambot gets access and sends spam out using your computer. The MailShield doesn’t even use resources when it’s not checking for mail, so keeping it will not slow your computer down.
c) Your settings will not be modified when you change the setup.
d) Unfortunately no. Users have requested it on the wishlist.
Thanks for the reply and explanation. Really want to know how it works so I’ll be able to use it’s full potential and pardon for my comparison to SBIE (got used to it and it’s the one I use with the exception of GesWall)
Further questions if I may thank you:-)
"a) You can run any program (.exe files) in the sandbox, not only browsers. You can use more than one browser in the sandbox. You can right click a program and select “Always run in sandbox” to make it so that it will always run virtualized when you double click to open it.
–How about programs that need to run with adminitrator rights? In SBIE it has a “DropMyRights” feature…does avast sandbox has this one or something else like it or none?
“b) You are doing it the right way. The setup needs to connect to the internet in case you want to install a new feature that you specified to not be included in a previous installation. If you have an account set up for an email program [even if you don’t use it], DavidR suggests that you keep the MailShield in case a Spambot gets access and sends spam out using your computer. The MailShield doesn’t even use resources when it’s not checking for mail, so keeping it will not slow your computer down.”
–Does this mean that I cannot make any changes to the setup if I am not connected to the internet? I am not always connected to the internet and I surf only when I am not tired from the office(mostly)…Is there any other way to change such setup? This is the only software that I know and have used that needs to connect to the internet prior changing it’s setup…hmmmm…
Will keep Mail Shield as per yur advice thanks for the explanation there.
“c) Your settings will not be modified when you change the setup.”
–Okay. Thanks.
“d) Unfortunately no. Users have requested it on the wishlist.”
–Tsk…you’d have to do setting up all over again when you uninstalled / install it again… I usually save my security settings like in firewalls for easy launching of configurations.
Thanks again for the help in understanding how avast works.
Avast sandbox doesn’t drop the users rights, it monitors its activities regardless WHO executed the process (admin or guest). It just virtualizes everything no matter which access rights have the executer. On the contrary, avast sandbox removes some process privileges (e.g. shutdown privilege, load driver privilege, etc).
Thank you for the reply guys, really appreciate it.
One quick question if I may add…
How can I check the update if I am really updated. Like today the GUI says, I am at 101125-1 Releasedate: 11/25/2010 11:29:38PM Number of definitions: 2245770…
Where in the website can I check if I am really up-to-date? Can you give me a link please…?
Excluded Outpost Pro folder in File System Shield earlier. Incompatibility pop up alert from updating Outpost. I just re-enabled WebControl in OP Pro after the Program Files>Agnitum exclusion. Thanks all!
I haven’t excluded the Outpost Pro folder in avast’s FSS and no issues, some considerable time ago I excluded one Outpost file and that was the C:\Program Files\Agnitum\Outpost Firewall Pro\wl_hook.dll, that is the only outpost file I have excluded.
The WebControl on OP Pro is unnecessary when you have the avast Web Shield and I think that it is that which OP is talking about in its compatibility. When you first install OP Pro part of the compatibility check and installation shouldn’t install their anti-spyware and webcontrol modules if you have avast installed.
I was using both Webguard (Avira)/WebControl(OP Pro)before and didn’t had any issues. Sometimes I disabled Webguard when traffic is heavy. I just need to have a birds-eyeview of avastPro’s WebShield / WebControl(OP Pro) in action together. Just new with avastPro and want to test more. But I agree with you that having both is redundant. Just like to see more observations then check observations if: (a) WebShield is disabled , (b)WebControl is disabled. Should have let it be when during the update WebControl got disabled but it would ruin my observations so I’d have to set it back. I’ll get there.
Seems to be working fine and my trial of avastPro is not bumpy as when Avira ver10 came out…(man…that was different…but learned more!)
Well I don’t know how avira’s webguard works so I can’t say if it would have potential for conflict with OP’s webcontrol. I’m only stating what OP’s installation did in compatibility mode.
However, I basically want my firewall to be just that a good firewall, I don’t want it trying to be all things to all men.
Yeah same here(firewall).Actually there was a handfull of problems that Webguard(Avira ver10) gave me with Outpost but got around it eventually. I find avast more refined and it’s great using it! Thanks for your accomodation and assistance! ;D