Very sad indeed sandboxie 3.48 cracked

Discussion in 'sandboxing & virtualization' started by the_sly_dog, Aug 16, 2010.

Thread Status:
Not open for further replies.
  1. TinPie

    TinPie Registered Member

    Joined:
    Aug 16, 2010
    Posts:
    7
    Wow, anti sandboxie, virtual box, and other antis!... that makes sandboxie worthless and other security softwares...

    That would be a super .exe malware.. :[
     
    Last edited: Aug 16, 2010
  2. dw426

    dw426 Registered Member

    Joined:
    Jan 3, 2007
    Posts:
    5,543
    Don't start building your Armageddon shelter just yet. It's well known that previous pieces of malware have been able to bypass virtual apps and sandboxes, and future ones will be made to do it as well. Nothing new to see, vendors work on them as soon as they get samples.
     
  3. trjam

    trjam Registered Member

    Joined:
    Aug 18, 2006
    Posts:
    9,102
    Location:
    North Carolina USA
    Dont tell Peter.;) o_O
     
  4. TinPie

    TinPie Registered Member

    Joined:
    Aug 16, 2010
    Posts:
    7
    Wow, that is true, dw426. Private hackers are out there and can do alot of damage.

    It's the end of the internet world! D:
     
    Last edited: Aug 16, 2010
  5. mick92z

    mick92z Registered Member

    Joined:
    Apr 27, 2007
    Posts:
    548
    Location:
    Nottingham
    Its just my opinion, but, I think, a lot of people here are paranoid.Of course, ultimately, anyone is vulnerable.but if your sensible,then there's no need to worry your life away.Safety in numbers, there are millions of imbeciles, sat at computers.I am not worried. I am not paranoid. Sorry if this is off topic
     
  6. TinPie

    TinPie Registered Member

    Joined:
    Aug 16, 2010
    Posts:
    7
    yeah... but im not really paranoid... just a slight slight small fear...
     
  7. the_sly_dog

    the_sly_dog Registered Member

    Joined:
    Feb 28, 2006
    Posts:
    297
    Location:
    The Heart Of London
    I`m Not worried either i only run a virus scan every 15minutes and a spyware scan every 30minutes :D:D:D I used to be like that honest now i just run afew apps scan maybe once a month thats all now... i have taken the tin foil off my head now and now enjoy the world wide web....
     
  8. dw426

    dw426 Registered Member

    Joined:
    Jan 3, 2007
    Posts:
    5,543
    Good God, Sly, did you ever get anything done? What on earth were you doing on the web that called for all that? Lol, I thought I was a high risk surfer, you make me look pathetic.
     
  9. wearetheborg

    wearetheborg Registered Member

    Joined:
    Nov 14, 2009
    Posts:
    667
    TinPie, use SRP+LUA +No Autostarts for Users --- a bulletproof** solution for protecting your system.

    **Unless there is a kernel vulnerability in the OS itself -- but those are very hard to come by, and are quickly fixed.
     
    Last edited: Aug 16, 2010
  10. Franklin

    Franklin Registered Member

    Joined:
    May 12, 2005
    Posts:
    2,517
    Location:
    West Aussie
    Yep, using that configuration you can stare at your screensaver all day as that's about all you can do.

    For real security and run anything or surf anywhere you want then use the apps in my siggy.
     
  11. wearetheborg

    wearetheborg Registered Member

    Joined:
    Nov 14, 2009
    Posts:
    667
    What the heck are you talking about, I run MS office, browse on the web, play movies, read papers, etc etc.
     
  12. Franklin

    Franklin Registered Member

    Joined:
    May 12, 2005
    Posts:
    2,517
    Location:
    West Aussie
    Well if being in screensaver mode suits you then use it.

    If you see an app you want to try, let's say CCleaner, can you install it to see what it does?
     
  13. wat0114

    wat0114 Guest

    I just open the vm, log on as administrator, then install it. If I don't like it, then I revert to recent snapshot and it hasn't touched the host system at all in the process :) I see what you're getting at, Franklin; it's clearly faster to do everything from an administrator account, for obvious reasons, but if one is not installing many new apps or changing system configs that often, and all their programs work fine from a standard account, then it makes more sense to run from a standard account. Of course you and several others in this forum alone do have the expertise to play safe from an admin account, but I'd not endorse it as a blanket recommendation to the masses.
     
  14. Warlockz

    Warlockz Registered Member

    Joined:
    Oct 30, 2008
    Posts:
    642
    yup its the only way to go, other crap seems like overkill, who wants to restart their machine just to test 1 app and return it to original state, I can even play with malware on VM, although I still cant find any to bypass comodo internet security though, even rootkits dont stand a chance. :D and the best part is comodo internet security is free!
     
  15. Carbonyl

    Carbonyl Registered Member

    Joined:
    May 19, 2009
    Posts:
    256
    I thought that there were no known samples of malware that could bypass Sandboxie?
     
  16. Franklin

    Franklin Registered Member

    Joined:
    May 12, 2005
    Posts:
    2,517
    Location:
    West Aussie
    No known samples in the wild have been found that can bypass Sandboxie and I think over the years there have been two obscure bypass methods both found by Buster BSA and which have been patched.
     
  17. nick s

    nick s Registered Member

    Joined:
    Nov 20, 2002
    Posts:
    1,430
    Those crypter settings are used only to prevent debugging/analysis in virtual environments...not to bypass them. When you execute malware crypted in this way in a virtual environment, the attack aborts (nothing happens).
     
  18. nick s

    nick s Registered Member

    Joined:
    Nov 20, 2002
    Posts:
    1,430
    A patched DLL can do many undesirable things in legitimate ways and never catch the eye of a malware scanner.
     
  19. dw426

    dw426 Registered Member

    Joined:
    Jan 3, 2007
    Posts:
    5,543
    Maybe so, but the chances of this particular one being infected with something, seem to me at least, low. Also, as I mentioned in a previous post, this particular dll caused Sandboxie to not be able to start, due to this particular patched dll being a 32 bit version and I on a 64 bit system. So, unless I'm missing out on something here, that dll never really got the chance to run, therefore it SHOULDN'T have been able to do anything dastardly.
     
  20. tipo

    tipo Registered Member

    Joined:
    Dec 29, 2008
    Posts:
    440
    Location:
    romania
    there are keygens and cracks all over the internet....you can`t stop those guys!for them it`s a way of living, it is fun and probably way of earning money...
    here is a list found on just one crack site:
    Sandboxie v3.442-CRD :: 264 Kb :: 17.04.10
    Sandboxie v3.44-MESMERiZE :: 34 b :: 3.02.10
    Sandboxie v3.44-MESMERiZE :: 72 Kb :: 3.02.10
    Sandboxie v3.42-CRD :: 45 b :: 1.12.09
    Sandboxie v3.40-CRD :: 45 b :: 30.09.09
    Sandboxie v3.38-CRD :: 45 b :: 28.05.09
    Sandboxie v3.36.04-CRD :: 45 b :: 27.04.09
    Sandboxie v3.36-CRD :: 45 b :: 13.04.09
    Sandboxie v3.42-CRD :: 264 Kb :: 1.12.09
    Sandboxie v3.40-CRD :: 344 Kb :: 30.09.09
    Sandboxie v3.38-CRD :: 344 Kb :: 28.05.09
    Sandboxie v3.36.04-CRD :: 344 Kb :: 27.04.09
    Sandboxie v3.36-CRD :: 344 Kb :: 13.04.09
    Sandboxie v3.32 :: 45 b :: 16.11.08
    Sandboxie v3.30 :: 45 b :: 2.09.08
    Sandboxie v3.34 :: 33 Kb :: 5.01.09
    Sandboxie v3.32 :: 85 Kb :: 16.11.08
    Sandboxie v3.30 :: 26 Kb :: 2.09.08
    Sandboxie v3.28 KeyMaker :: 43 b :: 30.06.08
    Sandboxie v3.28 KeyMaker :: 61 Kb :: 30.06.08
    Sandboxie v3.25.02 KeyMaker :: 45 b :: 7.04.08
    Sandboxie v3.26 :: 33 Kb :: 27.04.08
    Sandboxie v3.25.02 KeyMaker :: 61 Kb :: 7.04.08
    Sandboxie v3.22 :: 33 Kb :: 9.02.08
    Sandboxie v3.02 :: 43 b :: 19.10.07
    Sandboxie v3.01 :: 45 b :: 15.09.07
    Sandboxie v3.00.09 :: 45 b :: 31.07.07
    Sandboxie v3.21 :: 33 Kb :: 7.12.07
    Sandboxie v3.02 :: 33 Kb :: 19.10.07
    Sandboxie v3.01 :: 26 Kb :: 15.09.07
    Sandboxie v3.00.09 :: 33 Kb :: 31.07.07
    Sandboxie 2.62 :: 35 Kb :: 20.10.06
    Sandboxie v2.25 :: 3 Kb :: 6.03.06
    Sandboxie v2.25 :: 4 Kb :: 6.03.06
     
  21. dw426

    dw426 Registered Member

    Joined:
    Jan 3, 2007
    Posts:
    5,543
    True, I wasn't thinking of the digital signature. Either way, the dll failed here, so no infection for me :)
     
  22. nick s

    nick s Registered Member

    Joined:
    Nov 20, 2002
    Posts:
    1,430
    Per tzuk (Your Comments About Version 3.49)...

     
  23. dw426

    dw426 Registered Member

    Joined:
    Jan 3, 2007
    Posts:
    5,543
    Alrighty, learn something new every day I do, lol. Either way it failed on this system, so I'm assuming the DLL never got a chance to do anything dirty, if there was indeed anything malicious about it.
     
  24. the_sly_dog

    the_sly_dog Registered Member

    Joined:
    Feb 28, 2006
    Posts:
    297
    Location:
    The Heart Of London
    I sent it to one of the anti-virus labs they checked it and said the file is not infected it`s clean ??
     
  25. dw426

    dw426 Registered Member

    Joined:
    Jan 3, 2007
    Posts:
    5,543
    I don't consider VT a "virus lab" myself, but that's neither here nor there. Having VT, Avast, Hitman Pro and Prevx all say it's clean, to me means it's clean. I'm sure the numerous others who downloaded it likely have a variety of AV/AM scanners, so if no one is reporting it infected at the place you came across it, then it's safe in my eyes. That's not really the point of the thread though, the point is, what the majority of us knew would happen, has happened and will keep happening.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.