Avast Sandbox

How does Avast sandbox protect you against spyware ?

For example you stumble upon a spyware , but if u do not close your browser , the spyware is still in the browser sandbox , so if u type a password for example in youtube in that same browsing session , can the spyware then steal your youtube password ?

Thats why i think its good to also make a option to run the browser in a limited right version , not administrator rights.

Or data entered in the sandbox , must be encrypted by Avast.

Short and basic answer, because it isolates the program in the sandbox from the live system.

so the spyware is there , but it cant operate ?

Ideally. Depends on what you define as “Spyware”.

Something like the Ask toolbar (many consider this spyware) would probably be able to work fine in the sandbox.

When I had the sandbox, I ran into a fake AV, and the sandbox did what it was supposed to do from all I was able to ascertain. Browsing Google images, clicked on a link, up comes a pop-up that looks like Win. Explorer, but for XP (amusing, as I run Win7), then a scan box saying I’m infected, browser locked up. Went into Avast! UI, killed the browser process, and that was the end of it. All subsequent scans with many tools came up clean, something I’m sure would not have been so simple had I been not using Fx sandboxed.

Avast! takes a 2-fold approach to on-demand sandboxing. It gives you the regular sandbox to protect the browser (mainly) from being the weak attack point it usually is, shielding it from accessing the system. And also SafeZone, the opposite idea. Made to protect your browser from the system itself, in case you have an existing infection already.

yea i mean real spyware , malware.

spyware needs to acces windows files before it can operate or something ?

and the sandbox stops it from doing that , so the spyware cant spy …right ?

Most malware/spyware needs to add registry entries, possible place files in the system folders, etc. in the sandbox it is blocked from doing that.

When you exit the sandbox, effectively poof, gone.

ok thanks