4 ms·
The readme shows it runs as SYSTEM which means it can write to disk and make network calls, etc.
by tbrock 7y ago
The readme shows it runs as SYSTEM which means it can write to disk and make network calls, etc.
- pilif 7y agowell. the process that contains the JS engine can. The JS engine itself seems to be limited to what JS engines in browsers can normally do, so no intentional file system access. However as the README says, this is a custom built implementation, built by a company who believes running a JS engine with SYSTEM privileges is a good idea. This means that there are probably exploits available and those do get full access to the system as the highest privileged user.
- TeMPOraL 7y agoAnd, let me guess - this JS scan is a part of their "web protection" stuff that runs on the websites you browse? Because that would mean attackers can drive-by exploit a lot of people with a bit of malicious script attached to an ad.
- saagarjha 7y ago> That service loads the low level antivirus engine, and analyzes untrusted data received from sources like the filesystem minifilter or intercepted network traffic.
- makach 7y agothis can't be good for avast. I used them earlier but have stopped using them after seeing windows defender becoming better.