avast! wants to auto sandbox popular screensavers in Win7

Avast Free Antivirus / Premium Security
1

Why does avast! do this? It’s the usual sandboxing message, but I’m starting to wonder if the screensavers are infected somehow?

2

Can we get the link to those “popular screen savers” if you have downloaded from the internet? modify the link to hxxp and post.

3

Exactly…If its so popular show us a link please.

4

I’m not having any of the default Win7 screensavers being flagged by the autosandbox.
Probably you’re using non standard ones and, maybe, one or another could be suspicious.
You can also submit the *.scr file to www.virustotal.com

5

Probably something from a site like “free screen savers” which always packs adware into there products.

6

Could be. We need a reply from the OP.

7

If there was an adware included, it would be reported as an ordinary detection (provided it’s detected, of course).
I’d say the screensaver executable is packed by a runtime packer - which the heuristics considers suspicious (amongst other things) and offers the sandboxing.

8

Guys, I didn’t download it from the internet. It comes with Win7 screensavers.

9

Update to the latest version.
6.0.1091 was just released…
asyn

10

I’m updating…

11

Ok, please report back.
Thanks,
asyn

12

I somehow don’t think a program update would change this behavior…

A default Win 7 screensaver? Which one in particular?

13

Popular Screensavers.

14

Here are the files it said it opened with:

File C:\Windows\SysWOW64\f3PSS

Opened by: C:\Windows\System32\rundll32.exe

15

Update success, by the way.

16

There is no such thing as Popular Screensavers that come with stock Windows 7. Either someone download it and installed it or it came pre-installed with your computer.

17

i have no such file on my pc… a search for that file name turns up as mywebsearch, although its running from a different location

i think your username may be a bit of a misnomer ;D

18

Go to xww.popularscreensavers.com . It’s an adware infected site.

19

If so, please, break the link! Do not post live url of malware.

20

Tech please think for a minute. I said adware. Not malware. I typed that in on my phone. The site is not maliciously linked but any site such as this is always packed with adware. Usually toolbar stuff.