Behavior, not withelists at all. Corrections are done by virus definitions update. Not all the files are uploaded and analyzed and it is avast, not the user, who controls which files will be uploaded.