![]() |
| TheBat, Avast and Sandboxie |
|
tzuk
|
And you are sure that if Sandboxie is not the mix, then avast detects the malware as soon the file is placed in the Attach folder?
|
||||||||||||
|
_________________ tzuk |
|||||||||||||
|
Guest10
|
If you can exclude some folder from Avast scanning, you can probably use Notepad to create a .txt file in that folder that contains the EICAR test file.
See the one-line test string listed under "Design": https://en.wikipedia.org/wiki/EICAR_test_file (Don't include the [1] footnote symbol) You need to create the file in a folder that Avast isn't scanning. Otherwise, Avast will "clean" the file right away. Then, see if you can attach that file to two emails to yourself. Open one when sandboxed and one when not sandboxed, to compare the two. |
||||||||||||
|
_________________ Paul XP Pro SP3 (Admin rights), Zone Alarm Pro Firewall, Malwarebytes Pro, Firefox 21, Thunderbird 17 |
|||||||||||||
|
atomheart
Guest
|
it was not Sandboxie, it was Avast who was not fast enough with updates for virus signatures. That was the reason why Avast did not detect it when it was written first time on the harddisk. Later (few hours) I checked the file again and it was detected. Amazing how fast malware distributes these days.
|
||||||||||||
|
|
|||||||||||||
| TheBat, Avast and Sandboxie |
|
||
|


Use the RSS feed to watch this topic for replies