Question on Sandboxie and Anti Virus.

[Noxiide]

Okay, so I just got Sandboxie, and it seems quite nice, you know, having everything sanboxed in there. I also have Vipre Antivirus Premium. I only have one concern, but it isn't really a big deal. I downloaded like the eicar test file, and I downloaded like two Trojans, but Vipre like, detected even though they were in the Sandbox, and then quarantined them.......how did Vipre take it out of the sandbox? Should I be concerned about this or no? Because you know, I don't want to risk something happening when Vipre tries to take it out of the sandbox and quarantine it. I would rather just be able to deleted when I delete everything in the Sandbox.

 

[Bill2]

Theres no cause for cocern. Sandbox is just a folder on the hard drive, so the AV should be able to reach it.

Your anti-virus should tell you where the virus was identified. If the virus was identified within the sandbox (typically, in the SANDBOX folder in drive C), there is little cause for alarm. You can immediately invoke the Delete Sandbox command, or you may direct the anti-virus to delete the virus file, or move it to quarantine.

The anti-virus itself is not operating under the supervision of Sandboxie, even if the virus alert seems to indicate otherwise. Operating outside the sandbox, the anti-virus can reach into the sandbox folder, pull the virus file, and move it into quarantine. The process is similar to Sandboxie Quick Recovery, wherein Sandboxie Control reaches inside the sandbox to pull some file out of it.

Source: Sandboxie - FAQ Virus

 

[I be he]

Okay, so I just got Sandboxie, and it seems quite nice, you know, having everything sanboxed in there. I also have Vipre Antivirus Premium. I only have one concern, but it isn't really a big deal. I downloaded like the eicar test file, and I downloaded like two Trojans, but Vipre like, detected even though they were in the Sandbox, and then quarantined them.......how did Vipre take it out of the sandbox? Should I be concerned about this or no? Because you know, I don't want to risk something happening when Vipre tries to take it out of the sandbox and quarantine it. I would rather just be able to deleted when I delete everything in the Sandbox.

Welcome to the world of no more malware. Some dont even have a A/V anymore once they get use to sandboxie:shock:

 

[brady]

no need for AV with sandboxie... unless you're testing AV / Malware

 

[Carbonyl]

no need for AV with sandboxie... unless you're testing AV / Malware

Not true if you're on an x64 system. Remember, the developer of Sandboxie himself has warned that the x64 version of Sandboxie is inherently less secure than the x86 version. He's doing a good job, of course, but he's outright admitted that the only reason he offers the x64 version is because lacking one was causing brand damage moving forward. It's very possible to still get infected while using Sandboxie if you're on a 64 bit system.

 

[I be he]

no need for AV with sandboxie... unless you're testing AV / Malware

Not true if you're on an x64 system. Remember, the developer of Sandboxie himself has warned that the x64 version of Sandboxie is inherently less secure than the x86 version. He's doing a good job, of course, but he's outright admitted that the only reason he offers the x64 version is because lacking one was causing brand damage moving forward. It's very possible to still get infected while using Sandboxie if you're on a 64 bit system.

If im not mistaken when tzuk refered to the 64bit not being as secure as the 32bit, he was being intellectually honest so not to start a controversy. However since the 64 downloads with ( rights dropped ) tzuk says this keeps the 64bit or par with the 32bit as far as being effective against the vast majority of malware, if not all the 32bit is effective against.
I have had no problems with the 64, even though ive gone looking for it many times:shock: As a matter of fact ive never even heard of the 64 failing since its inception, and i know there have been many who have done tests of their own.