Sandboxie

[pdxireland]

Anybody out there use it?
Your thoughts?

fmg

 

[not so gray matter]

Sandboxie is probably the most used "real" sandbox application. Most people just use VMware to run untested apps in a virtual setting. But, if you don't have the money to shell out for another 7 license then sandboxie will do the trick, maybe even better than a virtual solution.

 

[logicearth]

To be honest you don't have to shell out any money to run another copy of Windows 7 in a virtual machine. It is perfectly legit to run on the 120 day period.

 

[not so gray matter]

To be honest you don't have to shell out any money to run another copy of Windows 7 in a virtual machine. It is perfectly legit to run on the 120 day period.

Thats true... I'm not completely versed in the niceties, but what's safer for "untested apps" a sandbox or a virtual machine?

 

[logicearth]

Well I would have to say a virtual machine, because Sandboxie doesn't isolate the installation of the application. Sandboxie only isolates the running aspect of it. Well as far as I know anyways. At least with a virtual machine if it supports snapshots or undo disk, you can just revert back without going though the whole imaging installation thing.

 

[not so gray matter]

I kinda figured that, since if a VM crashes and gets infected / whatever you can just delete it off the hard disk. It's probably a bit harder for something to hack through Windows & a VM to get to your real Windows than it is for something to hack through just a Sandbox.

 

[hubris]

VirtualBox ( Open Source version ) is the cheapest and easy to set up.

Download VirtualBox 3.1.6.59338 - FileHippo.com

just went through a dummy setup run with it. (without a system image)

To be honest you don't have to shell out any money to run another copy of Windows 7 in a virtual machine. It is perfectly legit to run on the 120 day period.

Forgot that
Might use PCLOS minime.

BTW: SandBoxie is a target now, (among other things ). I have seen the whackers site.

 

[Jaxryley]

Sandboxie is one of the best security apps around.

After testing several gigs of malware samples through Sandboxie I can say it's been completely secure so far.

Way more convenient running samples sandboxed and just searching through the sandbox for any droppers rather than searching system wide as in a VM.

For each sample you would need to shutdown the VM deleting all changes then fire it up again for the next sample.

With Sandboxie all you need to do after running the sample and checking it out is delete the the contents of the sandbox and chuck the next exploit in there.

Some exploits are both sandbox and VM aware and won't run in those environments but you could employ Buster Sandbox Analyzer which has an option to hide Sandboxie's processes.

www.sandboxie.com :: View topic - Wich is the most secure way to test a virus? (VM+Sandboxie?)

 

[The Howling Wolves]

Sandboxie is one of the best security apps around.

After testing several gigs of malware samples through Sandboxie I can say it's been completely secure so far.

Way more convenient running samples sandboxed and just searching through the sandbox for any droppers rather than searching system wide as in a VM.

For each sample you would need to shutdown the VM deleting all changes then fire it up again for the next sample.

With Sandboxie all you need to do after running the sample and checking it out is delete the the contents of the sandbox and chuck the next exploit in there.

Some exploits are both sandbox and VM aware and won't run in those environments but you could employ Buster Sandbox Analyzer which has an option to hide Sandboxie's processes.

www.sandboxie.com :: View topic - Wich is the most secure way to test a virus? (VM+Sandboxie?)

I jumping in here because it relates to the thread of Sandboxie.
I just started using FREE Comodo version 4.0.14 which comes with Firewall + Defense+ Sandboxie.
I normally keep Sandboxie Disabled because the few time I have enabled it I get the BSOD. So now I have it disabled and will run Sandboxie from the original link and not from Comodo.

When I was running Vista Home Premium 32bit and Sandboxie(standalone) I always had Sandboxie as my default when going onto the internet and it worked great.

Now with Comodo incorporating in theie firewall, defense and sandboxie an I the only one having this problem?

 

[Jaxryley]

Best place to ask if you have any probs would be SB's forum.
www.sandboxie.com :: Index

 

[The Howling Wolves]

Best place to ask if you have any probs would be SB's forum.
www.sandboxie.com :: Index

Sandboxie comes loaded in Comodo Firewall!
View attachment 68351


Have contacted Comodo and to date no response from them.

 

[whs]

Here is an article by Leo that is interesting in the context.

Question: I've just installed Ubuntu 10.4 under Sun Virtual Box. As I was playing and surfing the web with it, I started thinking that this could be a much safer way to surf, as what is happens on the virtual box stays on the virtual box, to paraphrase Tom Hanks. Question: is this really as safe as I think?

•​

Answer: Probably not.
Don't get me wrong, using a virtual machine (or "VM") can add a very significant layer of security and safety, and can be an extremely useful approach to increasing both.

But it's not a perfect solution, and if its limitations aren't considered it can be quite dangerous simply by giving you a false sense of security in areas that it doesn't really help.

Read more here.

 

[CarlTR6]

The link is not working for me.

 

[jav]

Sandboxie comes loaded in Comodo Firewall!
View attachment 68351


Have contacted Comodo and to date no response from them.

No, it dosen't.

It is Comodo's own sandbox, it is similar to SandboxIE, but it's not it.

They are products from the same category produced by 2 different companies.

It's like this: Outpost is standalone Firewall, but NIS 2010 has firewall aswell.
SanbooxIE is standalone Sanboxing program, but Comodo has sandboxing features aswell.

 

[whs]

The link is not working for me.

Sorry Carl and Jav, I think I fixed it.

 

[CarlTR6]

The link is not working for me.

Sorry Carl and Jav, I think I fixed it.

Yes, it is working. Good article. Thanks.

 

[pdxireland]

OK, I want to play with / test Sandboxie.
I have installed the program on an old P4.
Why is it when you want a few viruses you can't find them.
Any URL suggestions as where to get the little pesky bugs.
Don't offer real URLs as I do not want anybody on accident to visit them, just type them out in a fashion that they will not be hyperlinks!!!!!!
My old P4 is in the basement & I plan to use Team Viewer to connect to it & mess around.
I assume there is no risk of something bouncing over via Team Viewer?

fmg

 

[jav]

No purposely posting or asking to be posted, any malicious content (any content or links containing malware).

So, we can't post it.

If you still want it, I can send you a PM, but I warn they are live malicious links not some kind of test files. So be careful.

 

[pdxireland]

Jav,

Thanks & no worries going to play around using old P4 box.

fmg