Destroying sandboxes

One of the mechanisms used by anti-malware applications is to institute a virtual "sandbox" to isolate suspicious files from the rest of the system while they are quickly analysed for malicious content or behaviour.

Creating a sandbox requires the anti-malware software to essentially institute a Virtual Machine - a computer that is completely implemented in software. A lot of current sandboxes are designed to emulate network connections and normal system behaviour in an effort to trap malicious output from a suspicious file or application

Full story here http://www.theregister.co.uk/2007/07/16/sandbox_malware/

 

Previously posted here.

Same content, different page.