Are Sandboxie multiple windows sandboxed?

Re: Are Sandboxie multiple windows sanboxed?

I have found a security flaw and security breach in Sandboxie.

When I run Sandboxie and then empty it (using Eraser as delete tool), it still saves information OUTSIDE of the Sandboxie folder. Which means it is WRITING data OUTSIDE of the Sandboxie.

I found it when I used CCleaner. Here is example:

C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Horizon-14-Nighttime-2.mpeg.lnk 565 bytes

That is one of MANY from a Sandboxie session.

So my question is.. WHY ON EARTH IS SANDBOXIE ALLOWING WRITING AND SAVING TO A PLACE ON THE HDD OUTSIDE THE SANDBOXIE FOLDER?

 

Re: Are Sandboxie multiple windows sanboxed?

Yep did that, and then just pointed it to Eraserl.exe

 

Re: Are Sandboxie multiple windows sanboxed?

tonyseeking, i'm pretty sure that's Windows recording your recent accessed files. Nothing passed SBIE.

People have tested SBIE for quite some time (years), and with real threats. Something like that would have been noticed no?

 

Re: Are Sandboxie multiple windows sanboxed?

Obviously I am the first to have noticed it, and things are written OUTSIDE of the Sandbox, which is no good!

Read the main post in the other thread. Steve said this can be a real issue.

 

Re: Are Sandboxie multiple windows sanboxed?

LOL!...Just think of me as Wilder's Special Ed member. I am definitely a beginner. But I did figure it out and I appreciate your help. I don't know what is left that needs erasing, or if it really matters, but if it's easy to do then I'm going to do it just in case it does matter.

I have read that there is a dat file left by Returnil so maybe they will figure out how to get rid of that one too.

 

Re: Are Sandboxie multiple windows sanboxed?

Well glad to hear you got it working,

I'm not sure what else you want to delete as long as you empty the sandbox thats everything unless you mean other things not related to sandboxie,

As of for the .dat file in returnil you can alway ask in the returnil section of the forum, coldmoon is very helpful,

I use returnil but I don't know anything about the .dat file.

 

Re: Are Sandboxie multiple windows sanboxed?

That is true. However, Mike (coldmoon) has written that the new Beta version of Returnil has a secure delete option for those files.

 

Re: Are Sandboxie multiple windows sanboxed?

I'll go take a look. Thanks.

 

Re: Are Sandboxie multiple windows sanboxed?

I'll have to give the Beta a try. Or maybe I'll just wait until they work out the bugs and release it......just to be on the safe side. Thanks for the heads up.