Sandboxie 3.39.02 BETA released!

http://www.sandboxie.com/phpbb/viewtopic.php?t=6003

I'm yet to install and try this (not at home currently), but I just thought others may be interested in trying this out.

From what I heard from Wilders user Franklin, Sandboxie is now able to control or block those POCs in this thread:
https://www.wilderssecurity.com/showthread.php?t=239942

Anyone can confirm?

 

Confirmed on Vista SP2.

 

I have downloaded latest sandboxie and tried it. for those of you who don't know or remember there was 5 tests from the "some test" thread.

running XP SP2 here is my results.

htaaa.exe Pass
htaab.exe Fail
htaac.exe Fail
stop.exe Pass
stop2.exe Pass

so a good improvement from last time when all 5 tests bypassed sandboxie.
did Tzuk not get htaab.exe and htaac.exe ??

I can see sandboxie becoming a very powerful app in further Isolating running programs from the OS. good work Tzuk keep it up.

 

Confirmed here on Vista U.

Latest beta released yesterday so maybe Tzuk will give a changelog a bit later.

 

Windows 7 RTM compatibility has been added. Although there's no official change log that I know of, you can monitor bug fixes and new features in the Beta Version 3.39 forum.

 

Good to see that all are blocked here by default but they always were blocked here with a properly configured sandbox.

Start/run access settings could be seen as similar to run trusted/untrusted or allow/deny settings in other security apps.

 

The idea of these tests is too see if sandboxie can properly Isolate and control the behavior of "RUNNING" programs. we all know about start run access but that is not the point. lets not get into this argument again.

anyway can any one else confirm on XP SP2 that htaab.exe and htaac.exe fail?

 

All tests were blocked here using default sandbox settings on Vista SP2.

 

Ditto.

 

All tests were blocked here on an XP Pro sp2 vm.

Great stuff but I would still use the start/run restrictions as you never know what just may turn up in the wild.

With the start/run/internet restrictions in place Sandboxie is by far way superior than any and all other security apps.

 

Hmm. I have not followed this. Can anyone give a quick recap on what you are testing, or maybe more importantly what an improper configuration would be in regards to this discussion.

Thanks.

Sul.

 

and interesting how its blocked on XP Pro so Franklin says. I am using XP Home I presume you are too ?

 

don't say this while the going is good and while Tzuk is making patches or he might stop. he isn't going to far and they are not going to start conflicting.

There is also still the matter of the reg test.
http://www.ghostsecurity.com/registrytest/
which still bypasses sandboxie.

looking forward to seeing sandboxie properly Isolate that at some stage as well.

 

the start run is nothing special any HIPS can prevent things from executing and running.

 

Remind me of what those two are supposed to do and I will fire up the XP vm for another shot.

 

Hi ssj100,

A little bit off-topic: sorry for my ignorance but what does POC stand for?

Back in topic:

Remember I was testing Sanboxie 3.38 on Windows Vista Business SP-2 a while ago? Well, I noticed it disables IE8 “Protected Mode” in order to work on Windows Vista. That thing I didn't like it so much so I ended up uninstalling it.

Couldn't see the point of disabling one of the built-in security features of the OS in order to make itself work.
It's like some A/V vendors [e.g.: Symantec/Norton] who disable Windows Defender on Win Vista in order to make their A/V work on that OS.

Best regards,

Carlos

 

XP Pro SP2 VM.

Ran both in a default pre-beta sandbox. Htaab did jack then with htaac lost my desktop and taskbar.

Rebooted and installed the beta version of Sandboxie and both exes did jack?

 

Confirmed here as well on XP Pro SP3 non-VM.

 

well I'm glad that it has been confirmed that htaab.exe and htaac.exe fail on XP, for a moment there I thought I was seeing things and that I was dreaming lol.

 

Hmm, maybe not?

Will pm you.

 

XP VM again.

Sandboxie version 3.38 htaab.exe does nothing, htaac.exe kills explorer.

Sandboxie beta version 339-02 both exes are contained.

Cleared the sandbox in between running the exes.

Is it because of the VM or my vLited XP install?

 

Have you tried testing without VM and vLited XP?? the tests don't do any damage so it is safe to do so without VM.

 

There is a problem with the current version of Sandboxie and windows 7 RC - IE will not run as a forced programme.

With this beta, IE will not run under any circumstances!

Great update....

Puss

 

That test permanently modifies the 'real' registry ? Do you have any details of this breach ?

 

No it doesn't permanently modify registry but it manages to terminate explorer.exe and other running programs from within the sandbox which needs to be fixed.