Sandboxie Acquired by Invincea

I found another bug in SBIE. Sometimes when you copy some app from inside the sandbox to outside, SBIE will still take control and open the app sandboxed. It's almost as if SBIE is tracking the app.

 

Hi pete, there is a thread about that at the SBIE forum. There are other SBIE users who also call that a bug. I think it is just the way Sandboxie is designed to work. But whatever, it only happens when you copy a folder from inside the sandbox. It wont happen if you copy or cut a file out the sandbox folder. And if I recall correctly, after a reboot, the folder works as a regular folder, non sandboxed.

Bo

 

If you are talking about the executable for the app you installed sandboxed, thats perfectly alright. When we install a program in a sandbox, I can think of 4 or 5 different ways we can run the sandboxed app. One way is to run it by clicking the executable for the program that's inside the sandbox folder where you installed the program. You can also create a shortcut of that executable, place it wherever you want in the PC, and then run the sandboxed app by clicking the shortcut.

Bo

 

Rasheed, Pete, this is thread that's fairly similar to what you posted, Rasheed.
http://forums.sandboxie.com/phpBB3/viewtopic.php?f=11&t=21319

Bo

 

Am i the only one who gets reccuring sudden freezes with 5.4, 5.6 and 5.7 with IE11. A couple of times an hour. I am on 4.2 because of that.

 

In W7, I kept IE9. I don't get freezes while using IE9 sandboxed. You might want to check your extensions, antivirus addons, reset IE11 or perhaps for testing, disable Drop rights or run IE11 in a new default settings sandbox.

Bo

 

I have tried all but disabling drop rights, going to test it as soon as i can. But, is it an know issue or what ?
I am on W8.1.

 

Usually, if your sandboxed browser freezes, it is related to the AV you are using, another security software, perhaps something like a webguard or browser addon or a toolbar. If you don't have any of that, IE11 should run great. If you are using addons or an antivirus that gets along with SBIE, all should be well. What are you using for antivirus, and the rest of security software?

Bo

 

So it is not a known issue ?

And for the rest you wrote, noted !

 

Thats correct. I don't know what else if anything, you run sandboxed, but I run sandboxed just about anything that runs in my computers. And all programs and files run nicely under Sandboxie. Thats no luck, thats because I find and use program that don't interfere or conflict with SBIE.

If my browsers froze while browsing or the sandbox took 10 seconds or so to delete or programs took a long time to open when running sandboxed, to me that would be a clear sign that I have a program or addon or something thats interfering with SBIE. And then, I would find it and get rid of it.

Bo

 

What happen if Sandboxie misses and/or will not detect malware.

https://www.wilderssecurity.com/thre...avoids-sandbox-detection.375798/#post-2544295

 

I think you're misunderstanding, but you're right about this problem being similar to the thread on the SBIE forum. You can test it easily: Install CryptoWall Vaccine inside the sandbox, then copy the folder to "Program Files" on the real system. If you now launch the app, SBIE shouldn't start it sandboxed, but it still does, at least on my system. I saw this behavior before, and I suspect that after reboot, the problem will be solved.

http://labs.bitdefender.com/projects/cryptowall-vaccine-2/bitdefender-offers-cryptowall-vaccine/

 

Moose, they are not talking about Sandboxie in that article, Sandboxie doesn't detect malware. They are probably talking about sandboxes like the ones in Avast and Comodo were if a file is unknown to the AV, the file gets sandboxed. So, in the article they mean that this malware is designed to slip by antiviruses that have a sandbox without the malware being flagged as unknown or suspicious.

But anyway, you as a Sandboxie user, I suggest you get used to sandboxing your email client or webmail and all attachments that you open or recover. Thats exactly what I do. For example, if you were to send me an email with a PDF as an attachment and I downloaded to my PC, that PDF will be run sandboxed in my computer until the day it gets deleted.

For banking or sensitive browsing, do it in a fresh browsing session and don't go anywhere after you finish doing it. After you finish, delete the sandbox. As a SBIE user, thats basically all you have to do to keep malware away from your computer.

Bo

 

Rasheed, IMO, you get plenty protection against ramsonware from SBIE, the way I see it, the vaccine itself might interfere with SBIE at the worst of times (when you get hit by the malware). Thats why I avoid using antiviruses, etc. But anyway, after rebooting the PC, the sandboxing effect should be gone from the folder you moved out of the sandbox. If I was to install that vaccine, I would rather do it as its normally done.

Bo

 

To clarify, I was just quickly checking the app out, and yes it's not a big deal, but still a bug. And this tool shouldn't interfere with SBIE at all, plus SBIE can't protect against apps running outside the sandbox. Why do you think I'm still looking for a HIPS. HIPS + SBIE is a deadly combination for malware.

 

Bo,

Could you help me with the following long-time Sandboxie issue - cannot use Eraser to delete all Sandboxie contents?
Thank you in advance.

 

Zmechy, I cant help with Eraser. I use the regular delete method and I am not familiar with Eraser. But the guy in the thread below had the same error message as you, Curt suggested setting eraser to always run as admin.
http://forums.sandboxie.com/phpBB3/viewtopic.php?f=5&t=22013&p=115561&hilit=p115558#p115558

And check this thread about Eraser. It might give you clues how to set things up properly. You can also post questions there.
http://forums.sandboxie.com/phpBB3/viewtopic.php?f=5&t=20784&hilit

Bo

 

Thanks, Bo.
I think you gave me some interesting ideas.

 

I am glad to help Zmechy. If you have questions about Eraser and Sandboxie, ask them in the thread started by Guest10. He uses Eraser with Sandboxie and I am sure he ll be glad to help you as well. He knows both programs very well.

Bo

 

@bo elam,

Reading and following this topic/posts #2215 & #2217 hoping to get answer so, that I can learn from my mistakes!

Kind regards,

 

Hi Moose, I am not sure if you mean you got the answers or not. But anyway, my perspective is that you can be safe from malware like the one in the article or most malware really, by using Sandboxie for all it does. Some people think of SBIE as protection for the browser but thats not what SBIE is, sandboxing the browser is just a tiny bit of what can be done with it. So, I suggest to use SBIE for sandboxing just about anything that runs in your computers. You name it, if its gonna run in the PC, it should run sandboxed. Thats what SBIE is for.

And thats what I do. I also believe that I am safer not using anything along SBIE, that way I avoid conflict and programs interfering with SBIE, this is most important if you get hit by malware. Can you imagine, you getting hit by malware and then another program you have in your PC fight with SBIE when you try to delete the sandbox. And then something can go wrong. That sort of thing can happen and I want to avoid it.

And for sensitive browsing, from my POV, it is not that complicated to keep your money safe. Is so simple that I wrote in one short paragraph how it can be done. This works if you get used to sandboxing most programs and files that you run. And dont install funny and unknown programs or addons in your PC.

Our good friend Rasheed thinks differently than me, he feels safer using different programs for protection. If you are like him and prefer not to sandbox most files and programs that run in the PC or you install uninstall a lot of programs, then its probably best to do what he does. My computers are static, they change very little and I basically don't install anything new.

Bo

 

Here is how the "Sandboxie deletion" problem happened on my computer based on your explanation.
I think it has to do with my ADMIN account that I'm using on that computer.

 

@bo elam

do you have any idea how to perform this? :

- Force any videos contained in a dedicated "forced folder" (called "movies") to run in sandboxed players, the said players are portable (located in their own folder called "portable apps") and their executables are added in a sandboxie group (called "Media Players") . i tried many setting but they don't seems to work, i surely missed something.