I uninstalled HP Comfort Mouse, the uninstaller ran fine & gave the window reboot now or later & at this time Avast autosandbox popped up analyzing didn’t find anything & the program was terminated, the file in question was related to HP Comfort Mouse.
After restart HP Comfort Mouse was not there.
My query is anything autosandbox will not have the desired effect, right? i.e anything installed/uninstalled autosandboxed will not install/uninstall on/from the system, right? So how HP Comfort Mouse was uninstalled if it was autosandboxed & terminated?
Or a nonessential file relating to HP Comfort Mouse was autosandboxed & therefore HP Comfort Mouse was uninstalled. But did it completely uninstalled coz 1 file was autosandboxed?
I think default ask would be better than default auto for autosandbox.
I have said for a very long time Ask should be the default, but that too can be an issue as the user will get asked the question right away ‘what to do.’ Many will have no answer to make an informed decision, which is I believe why avast have chosen Auto as the lessor of the two.
With Auto, initially it will be investigated and run sandboxed, if set on Ask there is the possibility that the user selects Open Normally, if that decision is wrong it could be letting an unknown malware run.
So it isn’t so clear cut which is best, I know I would say Ask, but for the average user that brings its own issue.
I think any apps should be autosandboxed at its start i.e when any apps starts. Sometimes apps are autosandboxed in the middle i.e half the procedure is completed & then a file is autosandboxed so this can create mess in the system like incomplete installs of the apps in the system, m I right?
Well that would defeat the whole point of the autosandbox, if you are going to open everything sandboxed and not what is considered suspect, etc. because it matches a number of the criteria avast is looking for.
If the primary application launch isn’t suspect, but a subsequent file that it opens is, how do you know what to open sandboxed, without sandboxing everything and this would be totally unworkable.
So if I install an app & the installation runs fine but in the middle of the installation few files gets autosandboxed then I will get an incomplete install coz few files were autosandboxed & they will not be there when the app is closed but the incomplete install will be there as it was not autosandboxed, right?
That is why I advised setting the autosandbox mode to Ask, this gives you greater interactive control. So rather than it auto deciding what to run sandboxed, you have to decide.
As I said the problem with that is that you have to be able to make an informed decision on should you allow it to run normally or sandboxed.