VappWare Real Time Browser Protection(Browser Condom)

[mswiczar]

HI, i want to present my freeware version of a sandbox like surfing protection
Its developed using thsi techniques

#SSDT patching
#Minifilter Kernel Mode File System filter
Please try it at:


hxxp://www.vappware.com

[Pedro]

So how do you compare regarding SandboxIE, GeSWall, etc.
Only the way it operates.

[Seer]

Hello mswiczar. :)

You are advertising unknown code in one sentence. I expected a full review. Tell us more please... :D :thumb:

[Perman]

Hi, folks: I briefly viewed your first posting few hours ago, then it disappeared. IMO, you better rephrase your post title; a bit away from XXX sense. I clicked your web site, and do have few questions; (1) is your baby (still in alpha ?) similiar to other sandbox apps such as Sandboxie, if not, how? (2) you say on web site, your baby virtulizes registry and disk, but not the whole O/S. You have lost me right there, are you saying O/S is not stored on disk? then where it may be ? As far as I know that sandbox/virtualization apps insulate app/apps , partition or the drive, quite different from you have advocated. Your expert opinions are most welcomed here. Thanks.

[besafe]

-{ Quote: "HI, i want to present my freeware version of a sandbox like surfing protection
Its developed using thsi techniques

#SSDT patching
#Minifilter Kernel Mode File System filter
Please try it at:


hxxp://www.vappware.com" }-

I didn't click on the link you provided because I have no idea who you are. For all I know, that link could be be a big malware trap.

But I would like to hear more about your product. Can you please provide some more details? Maybe a screen shot?

[cheater87]

*Pokes link with a stick* Name seems fishy. I'll wait to see if its ok and if it is I'll download it on the old family PC.

[mswiczar]

Hi, i ll try to answer your questions

1) My baby is still in alpha, i must solve some known issues like installing software inside the sandbox. Now the baby is the Microsoft Driver Verifier, when i finish with the Driver verifier i ll put it in beta.

2)What i mean when i said Virtualize just your app, i mean not all the OS like
the VMWare, Virtual PC or Bosch implementation.
I dont know how SandboxIE works, my aproach is very simple.I dont use lazy writers. I ll try to explain how its works.

A) When your application need a file it will search in the right path, and then the Condom copy this file to the sandbox repository, so the application works with the copy of the file.
If the file is in the sandbox repository, it just us it.
to archive it i use a File system minifilter Driver.

B) when your application need something from the registry, it allways use the Sandboxed repository of the registry. The registry repositoy is a backup of the real registry using the Win32 Api well documented in the SDK.An then restored using diferent name
to archive it i use a a SSDT patching mechanism well documented in a lot of Rootkits open source. Because winxp do not have any method of get the same results.

c) OpenProcess and WriteprocessMemory, Createremotethread,Service control manager, undocumented ways to load images to memory (Nt SetsystemInformation), are patched as well to prevent any kind of treats.



The sandbox is 1 folder called Vcondom.
Inside it you have 2 directories 1 for Disk and other from Registry.
Inside the Disk directory you have a new directory for each Device Example:
HardiskVolume1/N

Inside the Registry directory you have the sandbox registry.


Thats all.







-{ Quote: "Hi, folks: I briefly viewed your first posting few hours ago, then it disappeared. IMO, you better rephrase your post title; a bit away from XXX sense. I clicked your web site, and do have few questions; (1) is your baby (still in alpha ?) similiar to other sandbox apps such as Sandboxie, if not, how? (2) you say on web site, your baby virtulizes registry and disk, but not the whole O/S. You have lost me right there, are you saying O/S is not stored on disk? then where it may be ? As far as I know that sandbox/virtualization apps insulate app/apps , partition or the drive, quite different from you have advocated. Your expert opinions are most welcomed here. Thanks." }-

[mswiczar]

Give me more time.
for now its an alpha version.
try to explain to your mother what is sandbox.



-{ Quote: "*Pokes link with a stick* Name seems fishy. I'll wait to see if its ok and if it is I'll download it on the old family PC." }-

[mswiczar]

Yes.
its an easy implementation.

-{ Quote: "So how do you compare regarding SandboxIE, GeSWall, etc.
Only the way it operates." }-

[mswiczar]

-{ Quote: "I didn't click on the link you provided because I have no idea who you are. For all I know, that link could be be a big malware trap.

But I would like to hear more about your product. Can you please provide some more details? Maybe a screen shot?" }-

My name is Moises, i dont have security Number because i live in Argentina.
but if you want to see my bussines i ll sugest to install from VMWare a vmplayer, then a virtual apliance, Browser apliance (linux (Ubuntu flavor)+ firefox) and from inside this shield you could be feel protected.

Bye

[Pedro]

If i understood you correctly, and don't take me wrong, that's SandboxIE's description, if we switch "condom" with sandbox.
SandboxIE has been around for quite some time. You might want to try it.

You have a file system virtualisation sandbox. This we understand.
A question: why "condom"?

[cheater87]

No one uses that old PC anymore so it should be ok.

[mswiczar]

-{ Quote: "If i understood you correctly, and don't take me wrong, that's SandboxIE's description, if we switch "condom" with sandbox.
SandboxIE has been around for quite some time. You might want to try it.

You have a file system virtualisation sandbox. This we understand.
A question: why "condom"?" }-

how to explain to my mother what a sandbox is.

She knows what is a condom.;D

[Perman]

Hi, folks: Just to lite(not light) up the air density here, no offense. Perhaps, C---M is a household name, and sandbox is a kid's toy in his view. When was the last time you played the sandbox ? ;D

[mswiczar]

-{ Quote: "Hi, folks: Just to lite(not light) up the air density here, no offense. Perhaps, C---M is a household name, and sandbox is a kid's toy in his view. When was the last time you played the sandbox ? ;D" }-

My dear fella, could you try to explain me how you cant prevent any virus disease with this toy. the word condom is a good aproach to reach the consumer group.

CONDOM is not a bad word, its a only way to be protected. try to explain it to your children now or in the furure.

please write CONDOM 100 times, the next reply.

Best Regards.
;D 8) :thumb:

[Seer]

Hello.

-{ Quote: "originally posted by mswiczar:

CONDOM is not a bad word, its a only way to be protected." }-

No, the best way to stay protected is not to mess with fishy stuff.
Anyway, I coughed some money for DefenseWall recently, so I think I'll just pass and wait for your beta baby.

Cheers. ;)

[steve161]

-{ Quote: "When was the last time you played in a sandbox" }-

Good point, but I sometimes hang out in a bar in the Bronx called the Sandbox. As far as whether it is safe to download this program, I downloaded it to my sandbox(ie) and checked it with A-squared and AOL AVS. It came up clean. Obviously, this is by no means a seal of approval, but just a little information for you more adventurous types.

[Perman]

Hi, folks: ~Snip~ I am sure your baby is no different from others. I rather wait for your next generation's beta or its final version to try on. Good luck.

[lucas1985]

-{ Quote: "My name is Moises, i dont have security Number because i live in Argentina." }-
Welcome compatriot :thumb:
Sandboxes and others virtualization tools are quite popular here at Wilders, alongside other nonconventional approaches to security (HIPS, behaviour blockers, integrity checkers, etc). You will have very hard competition because there are some well established players: GeSWall, Defensewall, Sandboxie, GreenBorder, BufferZone and others.
Best wishes to you and your "baby" ;D

[mswiczar]

-{ Quote: "Welcome compatriot :thumb:
Sandboxes and others virtualization tools are quite popular here at Wilders, alongside other nonconventional approaches to security (HIPS, behaviour blockers, integrity checkers, etc). You will have very hard competition because there are some well established players: GeSWall, Defensewall, Sandboxie, GreenBorder, BufferZone and others.
Best wishes to you and your "baby" ;D" }-

Thanks, i ll try to do my best. Im trying to put this technology to end users and not only for an elite.

Yes, there are a lot of good competitors, this is good, and this make me more enthusiastic.and make me feel proud.

Hope will be a nice race. I started late, but never is too late...


like Winston Churchil said:

..."Every day you may make progress. Every step may be fruitful. Yet there will stretch out before you an ever-lengthening, ever-ascending, ever-improving path. You know you will never get to the end of the journey. But this, so far from discouraging, only adds to the joy and glory of the climb"...

[lucas1985]

-{ Quote: "Im trying to put this technology to end users and not only for an elite." }-
Unfortunately, the average user is not aware of the security risks of the Internet until he/she is swindled.
-{ Quote: "Yes, there are a lot of good competitors, this is good, and this make me more enthusiastic.and make me feel proud. " }-
Fair competition is always good.

BTW, where are you living right now?

[mswiczar]

-{ Quote: "Unfortunately, the average user is not aware of the security risks of the Internet until he/she is swindled.

Fair competition is always good.

BTW, where are you living right now?" }-

I hope the Word Condom will be useful.

Im living In Argentina.

[lucas1985]

-{ Quote: "I hope the Word Condom will be useful." }-
It certainly has potential. Time will tell.
-{ Quote: "Im living In Argentina." }-
OK. I´m in Villa María, Córdoba.

[Peter2150]

-{ Quote: "It certainly has potential. Time will tell.

OK. I´m in Villa María, Córdoba." }-

Given your rational for the word Condom, given the connotation it has it is not good. It seems most of the people who seek out computer advice from me are women. I would recommend Sandboxie, and can easily explain what a sandbox is. No way am I going to recommend a product with the name Condom.

I think you can do better than that.

Pete

[Seer]

Hey Pete, good observation, women indeed are less computer savvy (generally). It is embarassing and offending to recommend to my mother or my sister a condom for protection... ::)

[mswiczar]

-{ Quote: "Given your rational for the word Condom, given the connotation it has it is not good. It seems most of the people who seek out computer advice from me are women. I would recommend Sandboxie, and can easily explain what a sandbox is. No way am I going to recommend a product with the name Condom.

I think you can do better than that.

Pete" }-

Browser Gum?:thumb:

I dont know a lot of womans,neither hers brain, but i have many woman friends. and they use to carry in hers womans purse condoms.
And they use them to protect against virus.
dont be unassertive. We are in the 21th century, until no other prevention ways were had found, we must use the Condom and talk about it
Its the only way to prevent many disease!
Joking if you want you can still play in the sandbox making towers and castles. my fella, meanwhile i ll use Browser Condom :)
With my sincerely and good intention :):thumb:

[Tarq57]

mswiczar,
Purely regarding the name, it is a clever analogy, as is sandbox, to describe a similar "blocking" or virtualization function.
I'd expect to see a certain user resistance/disinterest because of it, though, partly because of potentially seedy connotations.
A lot of users are quite adult enough not to balk at Condom as the name of a valid security application, but, frankly, if it's something I (and I reckon, quite a few others) wouldn't be comfortable explaining to a child, it's not something I'd want to install. This attitude might be fairly prevalent, especially so in some countries/cultures more than others.
Very clever, though, and I wish you luck.

[sukarof]

Hi mswiczar and welcome to the forum. I like the name of your software. If it works like a virtual condom it is descriptive imo and it helps to de-dramatize that dangerous word :P
When I click at your link it says http://h<i>tt</i%3Ep://www.vappware.com what is the red part?

[mswiczar]

-{ Quote: "Hi mswiczar and welcome to the forum. I like the name of your software. If it works like a virtual condom it is descriptive imo and it helps to de-dramatize that dangerous word :P
When I click at your link it says http://h<i>tt</i%3Ep://www.vappware.com what is the red part?" }-

Thanks, this is the URL

hxxp://www.vappware.com

[EASTER.2010]

-{ Quote: "Given your rational for the word Condom, given the connotation it has it is not good. It seems most of the people who seek out computer advice from me are women. I would recommend Sandboxie, and can easily explain what a sandbox is. No way am I going to recommend a product with the name Condom.

I think you can do better than that.

Pete" }-

I agree. The very use of that term to try to bring attention to a security software only tells us one thing. You copy/paste others code to create your so-called rubber balloon and additionally you obviously don't frequent security forums or else you would know what is mutually acceptable and what throws up big red flags like you have offered in this topic. No criticism just the facts.

Personally the lousy use of that name alone is enough to discount any efforts you might have hoped to accomplish, including feedback. I stop short of spamming because you might can't help the environment that surrounds you to have drawed up such a ludicrous title let alone another experimental sandbox if thats what it's really about.

Over and out. EASTER

[mswiczar]

-{ Quote: "I agree. The very use of that term to try to bring attention to a security software only tells us one thing. You copy/paste others code to create your so-called rubber balloon and additionally you obviously don't frequent security forums or else you would know what is mutually acceptable and what throws up big red flags like you have offered in this topic. No criticism just the facts.

Personally the lousy use of that name alone is enough to discount any efforts you might have hoped to accomplish, including feedback. I stop short of spamming because you might can't help the environment that surrounds you to have drawed up such a ludicrous title let alone another experimental sandbox if thats what it's really about.

Over and out. EASTER" }-

Hi, i did not copy and paste any software. this is an abusive and injurious.
Just for use The Condom in My Project.
I want to ask you something.

Are you a programmer? did you wrote any kind of software?
Did u eve developed any kind of software in ring 0.
Did you ever debug a crash dump.
If u did, congrats,for me was a pain to do it. and i ll finish it.

And in the future, i ll want to discuss with you perfomance issues, and security things. No just injuries.
Go to the site and read.
Use any virtual machine to test my software, and tellme whats your opinion.
If you tell me that my software do not work well, i ll solve the bugs. but please
just keept talking about Security.
The name of this place is other anti-malware software and Browser Condom is IT!

I make my best efort and YES, Its Marketing but i dont sell drugs, i just want to let the pepope know what is the risk of just plug and play Microsoft Wuindows software.

I dont have nothin more to speak with you. Enjoy the life if you can.
And go rest because its more than 8:Pm.
No eat fats, go to the church on sunday and never speak about sex with yours children.

Yes ITS MARKETING. i hope ll could reduce the number of infection spyware, malware and if i could AIDS transmision

Best Regard

Moises

[Seer]

Hey mswiczar.

This is way better marketing than the one you initialy started with. I understand that you have a language barrier, but you have to be convincing here and take the control of this (your) thread. Come up with a good marketing scheme, ask someone to help you in that if you can. This is very important. And try to somehow persuade people that your software is the right thing. :D

Cheers. :)

[EASTER.2010]

That last post completely satisfies my own curiosity.

As i already alluded to if you bothered to take it to heart, no criticism is intended on my reply even if you find it on the opposite end of discussion.

Programmer? That's for me to know and you to find out. If it helps ease the burden i have "years" experience in many programming languages and done my fair share of compiling but i stop there because unless or untill i formally make a declaration or other announcement of some release of a design, that's better left for when or if that time comes.

~Snip~

[Perman]

Hi, inventor: I know you are a smart fellow, w/ super IQ, armed w/ strong desire to save the world from virus infection, and high anticipation to capture the world w/ the first piecemeal, but you have started all these with a very wrong footing: you have offended your potential users by saying this,by arguing that. At end of the day, you gain nothing but disrespect. I dare to bet you one loonie that any poster on your thread would have walked more mileage on foot than you would have driven in car. They have more wakening hours than your adult lifetime. Be humble, learning from peers, otherwise your baby will stay in your incubator for a long long time. Just my loonie sense. I do hope you guide yourself accordingly.

[mswiczar]

-{ Quote: "Hey mswiczar.

This is way better marketing than the one you initialy started with. I understand that you have a language barrier, but you have to be convincing here and take the control of this (your) thread. Come up with a good marketing scheme, ask someone to help you in that if you can. This is very important. And try to somehow persuade people that your software is the right thing. :D

Cheers. :)" }-

My Fella, i dont try to convince to nobody.
When i have the Beta or any RC, we could chat again.

I know that the name is correct, this noise is good.
Sandboxie could be beter than my first approach, but i did not ever hear about it.
I hope the name condom ll make noise like it does in this thread.

Thanks in advance.
Moises

[mswiczar]

-{ Quote: "Hi, inventor: I know you are a smart fellow, w/ super IQ, armed w/ strong desire to save the world from virus infection, and high anticipation to capture the world w/ the first piecemeal, but you have started all these with a very wrong footing: you have offended your potential users by saying this,by arguing that. At end of the day, you gain nothing but disrespect. I dare to bet you one loonie that any poster on your thread would have walked more mileage on foot than you would have driven in car. They have more wakening hours than your adult lifetime. Be humble, learning from peers, otherwise your baby will stay in your incubator for a long long time. Just my loonie sense. I do hope you guide yourself accordingly." }-

Please could you tellme why all the people injury me, just for use the Word Condom.
i allways speak with cortesy. and with a little jokes.
i m only tell you this thing
i put this treat here to have opinions, testesr and the only thing that i received is just finish and then will see.
Yes my Lords


SORRY for think in a diferent way!!!

[Seer]

Hello again.

The name is not really that important if the software is of high quality. It can easily be changed, however, the errors in code are a bit of a pain.

-{ Quote: "When i have the Beta or any RC, we could chat again." }-

I look forward to it.

Regards,

[mswiczar]

-{ Quote: "
I do have a better suggestion for you though, how about Kotex. A program to help stop microsoft's code bleeding." }-

Its a nice Joke.
;D

[Notok]

You know, it's funny.. someone else used the word "condom" in the name of their sandbox program that was similar to DropMyRights. When that one was brought up (http://www.wilderssecurity.com/showthread.php?t=112349&highlight=condom) everyone took it in stride and with a sense of humor, now everyone's acting like this guy is making personal attacks.

He's produced a freeware version of software that has become fairly popular around here, I'm a little surprised at the total lack of respect. He even offers technical details of the like that hardly any others do. As far as the program being buggy, the fact that it's in alpha should have provided a rather blatantly obvious clue.

Once upon a time, Wilders was a place where we could come to discuss software on a technical level. We could learn the technology and were thrilled to see something new to try. You could actually learn something about security, and not just brand names. Now it seems to be just the opposite.

[EASTER.2010]

To each his own right? The name wasn't really as much some incredible issue as the follow up post posture taken IMO. That said is all i needed to see.

All i can add at this point is have fun with your browser condoms and hope the program at least makes up for the ridiculous rise some seem to get by dropping names even when they carry connatations of explicitives some CAN view as mundane.

If it was meant to infer humor then it's a resounding success, but come on, let's grow up here and at least try to act responsibly. Try marketing it in that manner, even as freeware. After all if you're dead set on it why not go ahead and announce another version along the lines of TROJAN or something. That seems to be fairly popular in gas stations and pharmacies.

[Notok]

-{ Quote: "To each his own right? The name wasn't really as much some incredible issue as the follow up post posture taken IMO. That said is all i needed to see." }-I think perhaps the language barrier has gotten the better of you (something I deal with on a daily basis); I didn't see anything offensive said on the side of the programmer (although I can kinda sorta see how it might be seen that way). All I really saw was him trying to explain that it was simply the easiest way to convey the concept of the program and how it works. He's also correct in saying that it's the 21st century and we're all adults, the word "condom" is not a dirty or vulgar word.

[EASTER.2010]

OK Notok, you made your case in support. I don't harbor no ill will to this topic just find it rather tacky but that's my own personal impressions and i realize others view it differently. I don't want this Topic to go off on some venture that terms used to name a product become an issue ok?

My replies we're just an initial reaction (not knee-jerk) that we might have something here leading to nothing of any real interest in PC security & drift away from the core of a valid introduction to a program.

You do have to admit though that the very reference can be easily misinterpreted or viewed as a joke.

~Snip~

[Peter2150]

Actually it doesn't matter. If mswiczar is doing this as a hobby, then cool. BUT if he is doing it as a business and wants to sell a product, then he needs to realize, that his opinion, about a name, is totally irrelevant, it's the markets opinion that matters.

Condom is not all that new or original, but hasn't been used. Hey Notok, I notice it's nowhere in Prevx1's name.:D , and for a reason. It may be cute, but a lot of decent products die over these kinds of things.

Good luck

Pete

[Pedro]

-{ Quote: "You know, it's funny.. someone else used the word "condom" in the name of their sandbox program that was similar to DropMyRights. When that one was brought up (http://www.wilderssecurity.com/showthread.php?t=112349&highlight=condom) everyone took it in stride and with a sense of humor, now everyone's acting like this guy is making personal attacks.

He's produced a freeware version of software that has become fairly popular around here, I'm a little surprised at the total lack of respect. He even offers technical details of the like that hardly any others do. As far as the program being buggy, the fact that it's in alpha should have provided a rather blatantly obvious clue.

Once upon a time, Wilders was a place where we could come to discuss software on a technical level. We could learn the technology and were thrilled to see something new to try. You could actually learn something about security, and not just brand names. Now it seems to be just the opposite." }-
Words of wisdom.
When i asked why condom, i didn't expect this. Of course, it's not a consequence of what i said, but i'm still surprised. It's just a name.
But i must make note that what Peter says is different. He's not being disrespectful, just expressing his opinion.

Easter: he's was polite, and his choice for the name of his freeware program should not be a big deal. The program should.

[StevieO]

@ mswiczar

I appauld your efforts which i feel are sincere. And having a sense of humour is appreciated, by me anyway, but unfortunately not everybody has one, or is always on the same wavelength as some other people ! I've learnt that sometimes we have to self moderate ourselves a little, as long as it's recipricated by others, we then have less chance of misunderstandings and falling out between us.

I understand why you initially might have thought Browser Condom was a good/catchy name. But in the long run to appeal to the most people amount of people who could use it, i think it would be better to think of a different name. Maybe something like Browser Safe for example.

Never be (SORRY for thinking in a different way!!!) that's how advances are made.

Actually Browser Condom has been used before.

http://www.browsercondom.com

Firefox condom

http://software.silicon.com/security/0,39024655,39129700,00.htm

I'm sure there was another application with the same or similar name. but i couldn't find it in time.

I hope your project matures nicely into a secure application, and don't be too put off by others views, but do take them into consideration as they are trying to help.


StevieO

[Acid_JJ]

I don't care about the name. I will try if this works.

Cheers.

[Meriadoc]

-{ Quote: "You know, it's funny.. someone else used the word "condom" in the name of their sandbox program" }-
I was thinking this when reading the thread but just couldn't think of the name until I followed the link.

The pictures at VappWare of ie, outlook with the condom over them and the pictures with browsers in the little foil packets was quite funny, and unexpected - thanks for the laugh.
Anyway enough of the name the protection is whats important.

[BrainWarp]

But the world would be a better place if more condoms were used.;D Even a cyber condom8)

[ronjor]

Discuss the software only.

[GES/POR]

Maybe it would be better if the programmer would first get the pope's blessings so he can call of the hounds on this thread!

[Jarmo P]

-{ Quote: "Discuss the software only." }-~Off topic comment removed~

For newbies: copy the link to browser URL field and change hxxp to http.
Kind of interesting to read info about the company, offices etc. hehe, but overall this has been a funny thread. I also suggest a bit more conventional name for the product. Just a friendly advice.

[ErikAlbert]

I thought it was a shortcut for condominium, like demo for demonstration. Thanks.

[Mrkvonic]

Hello,
A question to developer:
Why does your app need 100MB installation space?
Mrk

[mswiczar]

-{ Quote: "Hello,
A question to developer:
Why does your app need 100MB installation space?
Mrk" }-

I ll tell you why?
When you run any application inside the Vcondom, every time the application need to open any file (read, write, or just query).The condom first verify is the requested file reside inside the condom, if this is true the application could access to this file, else the requested file reside outside the condom, the condom first copy this file in the condom and give this new file (path) to the application.

So you have duplicated data. (just for the files requested by the protected application)

Example, when an application needs a c:\windows\system32\notepad.exe
the condom return this path to the application
c:\vcondom\condom1\disks\hardiskdrive0\windows\system32\notepad.exe

And to make the system with a high performance, first we fill the condom with the most used file to avoid copying files while running the application.

Example qhen you create a condom, the font directory, cursor directory, program files internet explorer directory, mozilla directory and some other applications are placed in the condom.

Hope this explain the installation and running space.

Best regards and please test this application inside a virtual machine.
We are in alpha, i dont want to crash your system.

Thanks a lot for your question.

Moises

[Meriadoc]

Hi mswiczar,
I'm using a clean vm to test BC but I get bsod at the moment - opening ie & FF.
I notice you have to wait before you can use the protection as it takes 3-4 mins to make a condom - can you quicken this up?
As I cannot test it right now can you tell me what threats it will protect against?

[rdsu]

-{ Quote: "Once upon a time, Wilders was a place where we could come to discuss software on a technical level. We could learn the technology and were thrilled to see something new to try. You could actually learn something about security, and not just brand names. Now it seems to be just the opposite." }-
You are right... :(
I really would like that this forum was as 2/3 years ago...

This wave of disrespect become frequent, and this harms what really must be spoken...

[Pedro]

-{ Quote: "
When you run any application inside the Vcondom, every time the application need to open any file (read, write, or just query).The condom first verify is the requested file reside inside the condom, if this is true the application could access to this file, else the requested file reside outside the condom, the condom first copy this file in the condom and give this new file (path) to the application.

So you have duplicated data. (just for the files requested by the protected application)

Example, when an application needs a c:\windows\system32\notepad.exe
the condom return this path to the application
c:\vcondom\condom1\disks\hardiskdrive0\windows\system32\notepad.exe

And to make the system with a high performance, first we fill the condom with the most used file to avoid copying files while running the application.

Example qhen you create a condom, the font directory, cursor directory, program files internet explorer directory, mozilla directory and some other applications are placed in the condom.
" }-
Looks like SandboxIE more and more. Again, don't take me wrong!
How do you plan on programing to recover files from the sandbox, pardon;D , condom? By exploring the condom folder only?

[mswiczar]

-{ Quote: "Hi mswiczar,
I'm using a clean vm to test BC but I get bsod at the moment - opening ie & FF.
I notice you have to wait before you can use the protection as it takes 3-4 mins to make a condom - can you quicken this up?
As I cannot test it right now can you tell me what threats it will protect against?" }-

Thanks again

Did you create the Condom First?
When you create the condom this steps are done by the main form.

Create "virtual Disk" doing this

1) c:\vcondom\Condom1\Disks\Device\HarddiskVolume1\;
2) and one Hardiskvolume for each volume (not yet implemented, i just implemented 1 volume)

Create Virtual Registry repository
1) c:\vcondom\Condom1\Registry\Machine\
2) c:\vcondom\Condom1\Registry\user\


3) ModifyPrivilege(SE_BACKUP_NAME,TRUE) // Need backup privilege
4) Export Macine key RegSaveKeyEx(hTestKey,afilename,NULL,REG_LATEST_FORMAT);
5) Export user key
RegSaveKeyEx(hTestKey,afilename,NULL,REG_LATEST_FORMAT);

Thats all.
Those are the task of the create condom procedure.
Remarks, when the RegSaveKeyEx run, its seems to frozen the pc, but its the way microsoft export the keys


Then

You must start the condom.

When you start the condom, this happend
1) I patched a lot of SSDT to prevent treats to bypass my protection.
2) I restore the backuped keys when you created the condom.
cbName = ModifyPrivilege(SE_RESTORE_NAME,TRUE);
cbName = RegLoadKey(HKEY_USERS,CONDOM_USER_CLASSES,afilename);
So i use the Windows algorithm to give access to the registry.

then when you start the browser

All the request data from the Applicatin living in the condom will be redirected to the "virtual disk" example c:\vcondom\Condom1\Disks\Device\HarddiskVolume1\

If the file is in the Virtual repository, it just open from there, if not, its copies from the real path to the "virtual disk" and then redirected to this place.

all the request registry from the application will be redirected to the new keys

Hope this will help you.

thanks again for your interes

[mswiczar]

-{ Quote: "Looks like SandboxIE more and more. Again, don't take me wrong!
How do you plan on programing to recover files from the sandbox, pardon;D , condom? By exploring the condom folder only?" }-

yes. you are right!
any suggestion?

[Devil's Advocate]

-{ Quote: "I agree. The very use of that term to try to bring attention to a security software only tells us one thing. You copy/paste others code to create your so-called rubber balloon
" }-

Serious charge, more information please.

-{ Quote: "
and additionally you obviously don't frequent security forums or else you would know what is mutually acceptable and what throws up big red flags like you have offered in this topic. No criticism just the facts.
" }-

I agree, it's criminal for him to not frequent security forums. How dare him!!

[Devil's Advocate]

-{ Quote: "Be humble, learning from peers, otherwise your baby will stay in your incubator for a long long time. " }-

If he really is the author of a software that works like Sandboxie, almost everyone (I would guess all) here particularly those acting all high and mighty* in this thread are NOT his *peers*. They would instead be people like Tzur, Ilya etc.

It's amazing how running a few HIPS and hanging around here for some time, can make you think you know more than you really do.

PS Not directed at you Perman.


* Wow, someone used a compiler once!

[Meriadoc]

-{ Quote: "Did you create the Condom First?" }-
Ofcourse.
-{ Quote: "...Then You must start the condom." }-
Yes I understand the program and looking at it more closely. You hook SSDT 11 times on start of condom.

[Meriadoc]

-{ Quote: "It's amazing how running a few HIPS and hanging around here for some time, can make you think you know more than you really do." }-
Who is this directed at? Yes I design and wrote software and a computer language. Now can we discuss program?

[mswiczar]

-{ Quote: "Ofcourse.

Yes I understand the program and looking at it more closely. You hook SSDT 11 times on start of condom." }-

if you want i can send you the source of the patching.
But first please contact me in mswiczar [at] vappware.com
I want to speak with you.
Now i just uploaded a new version compiled with checked build.
More data on

hxxp://www.vappware.com/vapp/index.php?option=com_content&task=view&id=17&Itemid=47

[mswiczar]

-{ Quote: "Ofcourse.

Yes I understand the program and looking at it more closely. You hook SSDT 11 times on start of condom." }-

by now im hooking (in this version)

ZwCreateFile
ZwOpenFile
ZwOpenKey
ZwCreateKey
ZwLoadDriver
ZwUnloadDriver
SetSystemInformation
ZwCreateSymbolicLinkObject
ZwCreateThread
ZwCreateProcess
ZwCreateProcessEx

this other patching are deactivated for now.

ZwAllocateVirtualMemory
ZwProtectVirtualMemory
ZwOpenProcess
ZwOpenProcessToken
ZwOpenProcessTokenEx
ZWDEBUGACTIVEPROCESS ZWREMOVEPROCESSDEBUG
ZwOpenJobObject
ZwSetInformationJobObject
ZwCreateJobSet
ZwOpenThread
ZwSetInformationThread



more data?

[mswiczar]

-{ Quote: "Hi mswiczar,
I'm using a clean vm to test BC but I get bsod at the moment - opening ie & FF.
I notice you have to wait before you can use the protection as it takes 3-4 mins to make a condom - can you quicken this up?
As I cannot test it right now can you tell me what threats it will protect against?" }-

Could you sendme your crash dump please?

[Devil's Advocate]

-{ Quote: "Who is this directed at? " }-

if you have to ask, it's not you.

I'm talking about the guy who is acting all upset because he thinks the guy doesn't hang around in security forums. And I'm still waiting to see him provide evidence (based on some weird reasoning), that all the code is cut and paste.

[steve161]

Vappware's website seems to be down at the moment. I was going to try this app in shadow mode, but it is almost 3:oo a.m. I'm done.

[Pedro]

-{ Quote: "yes. you are right!
any suggestion?" }-
humm, well, i can't think of anything that hasn't already been done.

The obvious solution, that others use but i don't think it's that special (it is obvious, one has to do something of the sort), is having the user choose what folders should be monitored (downloads for instance, bookmarks...), so that, when clearing the condom (more like trashing it, i don't re-use them...), the program would ask to save files from these folders. One would review the content of the folder from the program's GUI still, and save what is important.

[mswiczar]

-{ Quote: "the program would ask to save files from these folders. One would review the content of the folder from the program's GUI still, and save what is important." }-

Pedro, first of all, thanks for your interest.
This kind of feedback is very important.
Of course I ll do it, but whats happen if you forgot something?

What do you think if we put a trashcan?
When you discard the Vcondom, you could always restore files from the trash can. you could configure which files, or extension or folders do you want to always store in the trashcan.
We could have a watermark of how many storage can contain a trashcan?
The contens of the trashcan coud be encrypted, for more security.

[Pedro]

That sounds good. The user could choose if he wanted to use the trash can, or delete. Nice!
The encryption is also a good idea, but i can imagine the work ahead of you!

[mswiczar]

-{ Quote: "That sounds good. The user could choose if he wanted to use the trash can, or delete. Nice!
The encryption is also a good idea, but i can imagine the work ahead of you!" }-

i want to do my best.
i can buy a component to do the dirty job.
There are a lot of components for about 20 U$s to make encryption, without royalties
And the Trash is just a folder outside the Condom.

[EASTER.2010]

-{ Quote: "That sounds good. The user could choose if he wanted to use the trash can, or delete. Nice!
The encryption is also a good idea, but i can imagine the work ahead of you!" }-

Alright then mswiczar looks like you have something on the horizon worth some attention and hope it pans out for you and the users alike, but Say Dude, if you were after BOTH attention and a laugh then you got it, no offense meant, really, but of all names in the world you could have chosen, what guided your imagination with this one?

[mswiczar]

-{ Quote: "Alright then mswiczar looks like you have something on the horizon worth some attention and hope it pans out for you and the users alike, but Say Dude, if you were after BOTH attention and a laugh then you got it, no offense meant, really, but of all names in the world you could have chosen, what guided your imagination with this one?" }-

Attention is an important thing in a product.
But laugh is Very important.
Do you know when anybody laugh, he felt good. He could forget just for a while any other bad moments.

What more i can expect with a name? :)

[Pedro]

-{ Quote: "i want to do my best.
i can buy a component to do the dirty job.
There are a lot of components for about 20 U$s to make encryption, without royalties
And the Trash is just a folder outside the Condom." }-
I had no idea one could buy components. Always learning, thanks.
I hope you keep posting about the development of the program, maybe i can learn more (if i can understand..). This is early stage, so please share your frustrations/ obstacles/ achievements:thumb:

Oh, and welcome to Wilders!

[Mrkvonic]

Hello,

My impressions:

Language: You have quite a few mistakes in the phrasing / spelling. Not a problem in general, but English speakers are traditionally afraid / wary of non-perfect English.

Installation: Why does the app try to dial out?

Created condom.

Tried to run an application in Vcondom - got BSOD.

Here's the screenshot of it:

http://www.dedoimedo.com/images/non-web/bsod.png

So, didn't really have a chance to test it. But not the best start, I must say.

Mrk

[mswiczar]

-{ Quote: "

Installation: Why does the app try to dial out?
" }-
Its trying to redirect you to the site htlp page.
The application called ping.exe, get the serial of your hardisk and send it to the site, to have a count of diferent computers.
In the site more info about this
http://www.vappware.com/vapp/index.php?option=com_content&task=view&id=33&Itemid=67

-{ Quote: "
So, didn't really have a chance to test it. But not the best start, I must say.
Mrk" }-

If i can solve it quicky, ll be the best start :)


Thanks again,

Could you submit me your crash dump. please just the 64kb crash dump.
and the sysinfo of your computer.
to support@vappware.com

Program Files-> Accessories -> system tools->system Information.
and export it.


For more information on how to get a crash dump file a little help is here
http://www.vappware.com/vapp/index.php?option=com_content&task=view&id=34&Itemid=68


thanks a lot for helping me.

[JeffBuck]

Hi mswiczar,
thank you for this program.
I've used SandBoxie for much time, and I'm happy to have another choice if I want (even if the 2 softwares seems to be without difference ...).
I've a question for you ... in your site I read that IECondom is for both xp with SP1 and XP with SP2 ... is it real?
I try to install your software but ... what's the problem, my windows version or my memory?
(I've only 256MB but perhaps 16MB are used by videocard?)

[mswiczar]

-{ Quote: "I try to install your software but ... what's the problem, my windows version or my memory?
(I've only 256MB but perhaps 16MB are used by videocard?)" }-

It was my fault.
Please download it again, the setup requierement were changed.
now its allow sp1.
Thanks.

Ps, please read this before testing.
hxxp://www.vappware.com/vapp/index.php?option=com_content&task=view&id=34&Itemid=68

[mswiczar]

thanks for everyone about the interest in this new tool.
by now, i have some errors to fix.
please give me OTHER CHANCE in a few days.
For now , i must work to solve some bugs that cause BSOD.

I ll remove the setup until a fix this error.

again, Thanks!
you are a nice group of people.

[Rasheed187]

Hi,

I´ve tested this app in a virtual machine, and my first impression is not a good one, the GUI is unhandy, it does not seem to work correctly with IE/Maxthon and it also crashed my VM, might be some compatibility problem. In short: it does not seem to be as good as (for example) Sandboxie, not even close. This is not to "bash" your app, just an honest opinion.

And about the name, I agree with most of the people here, it´s not really a good name, I think you should rename it, it´s clear that most people don´t feel comfortable using software with such an awkard name. As you can see even AMUST changed the name from "AMUST eCondom" to "AMUST 1-Defender", of course it´s up to you.

[mswiczar]

-{ Quote: "Hi,

I´ve tested this app in a virtual machine, and my first impression is not a good one, the GUI is unhandy, it does not seem to work correctly with IE/Maxthon and it also crashed my VM, might be some compatibility problem. In short: it does not seem to be as good as (for example) Sandboxie, not even close. This is not to "bash" your app, just an honest opinion.
" }-
Thanks, could you send me your memory dump?
Yes its now we are in alpha and i just take out because it have many issues.
As you can see.
We are working hard to change this, and make it better.
Yes you are right, other applications run better, they are stable.
AT NOW WE ARE IN OUR FIRST ALPHA STAGE

[Peter2150]

-{ Quote: "Attention is an important thing in a product.
But laugh is Very important.
Do you know when anybody laugh, he felt good. He could forget just for a while any other bad moments.

What more i can expect with a name? :)
" }-

Unless you are doing this as a hobby which is fine, there is one thing even more important. That people buy it.

[mswiczar]

-{ Quote: "Unless you are doing this as a hobby which is fine, there is one thing even more important. That people buy it." }-

Its more important STOP people Hijack your computer or your Data

[EASTER.2010]

-{ Quote: "It was my fault.
Please download it again, the setup requierement were changed.
now its allow sp1." }-

Despite my earlier suspicions due to the odd naming model you chosen, i too am glad another Sandbox opportunity is surfaced. I have never been able to get any version of Sandboxie to function as expected or as other users have to any degree of satisfaction. I been thru tons of programs over the years and this just completely boggled my mind. The same always went for snoopfree. That darn driver for some reason simply would not be compatible with either my system or setup no matter how badly i wanted it to. Now at the latest released version, snoopfree is stayed in place and not one single BSOD or any other issue, so that glitch is over thankfully.

Since i also employ ServicePack #1 by choice it's lightened my disregard and instead stirred my curiosity now with your VappWare program. So don't be surprised if you run across another of my post replying with some results. ;D

[mswiczar]

-{ Quote: "
Since i also employ ServicePack #1 by choice it's lightened my disregard and instead stirred my curiosity now with your VappWare program. So don't be surprised if you run across another of my post replying with some results. ;D" }-

Please, do not test it right now.
We discovered a annoying bug that cause BSOD, just at begining of the program.

Please wait me for the new release.

ps: when i test in our enviroment all goes well, but in other enviroments, we have BSOD, so untill we descover the bug, please do not use the VCondom.

[EASTER.2010]

Well that is noble of you to offer that info and we do appreciate it. We're all eyes here and will wait on further updates from you.

Thanks by the way. :)

[mswiczar]

-{ Quote: "Hello,

Tried to run an application in Vcondom - got BSOD.

Mrk" }-

Could you send to me your Vm configuration?
are u using any Antivirus? Firewall? or just a clean system?
Please could u send me the crash dump.

ps: if any of the readers had s BSOD please send me your Crashdump to:
mswicza [at] vappware [dot] com
Thanks agains