Sandbox Question.

Today when I started one of my laptops an avast pop up said it was moving someting into my sandbox.(sorry can’t remember the process being moved) I just closed the pop up but wanted to find out what it was that was moved. I can’t figure out how to find it. Sorry if this explaination isn’t more concise but this is the first time this has ahppened. The laptop has the very latest version of avast and is running XP,thank you.

Can you try right clicking the avast icon in the tray and selecting “Show Last Popup Message”

That may not work depending on when it happened…

You could also check the autosandbox log:
C:\Documents and Settings\All Users\Application Data\AVAST Software\Avast\log\autosandbox.log

It will be near the end.

Ok just rebooted and the pop up says,“For your safety avast has placed the following in the sandbox”,C://program file/real/realplayer/exe,anyway I checked my settings and I had the sand box set to “auto”,I will change it to “ask” and see what options I get. Be back shortly.

OK now that I “asked”, the sandbox is giving me a few options,isn’t there anyway I could scan this to find out if it really is a threat,and if its not how do I remove it from opening in the sandbox,If I decide to just let it open and remain the sandbox from this point on,how do I stop the pop up from alerting me about the sandbox when I boot up.

C://Program files/real/realplayer/realplay.exe

Opened by C:/windows/explorer.exe

PS

I did a full system scan and it came up clean. Also I couldn’t find this,

C:\Documents and Settings\All Users\Application Data\AVAST Software\Avast\log\autosandbox.log

Since it was explorer.exe opening it, that must have been you opening it ?
e.g. clicking on a media file in windows explorer, that would launch real player if that is your default audio/media player or a file type opened by realplayer media player.

If so then no problem, select the Allow and add to trusted processes (or words to that effect).

If not tell us what you were doing when the alert came up ?

The alert came up as the computer was loading my,“star up” programs. What I did was “allow” the program to start normally, rebooted, and ran a full system scan with negative results.

OK, looks like you have a startup entry for this to start on boot.

Personally I’m no fan of real-player as it tries to take over the world when you install it, it sets itself to be the default media player (and to start on boot) and associates itself with all media file types.

It doesn’t need to start on boot, it isn’t an essential application and if you want to play a media file associated to real-player, double clicking on the media file would launch real-player anyway.

So I would recommend finding its settings and uncheck the start on boot option.

Thanks will do,everything seems to be running great now,as always thanks for your help.

No problem, glad I could help.