Buster Sandbox Analyzer

Discussion in 'other anti-malware software' started by Buster_BSA, Nov 29, 2009.

Thread Status:
Not open for further replies.
  1. Buster_BSA

    Buster_BSA Registered Member

    Joined:
    Nov 29, 2009
    Posts:
    748
    Don´t worry, I prefer that someone that is unable to find a README.TXT even looking for it doesn´t use my tool. No offense. :rolleyes:
     
  2. Buster_BSA

    Buster_BSA Registered Member

    Joined:
    Nov 29, 2009
    Posts:
    748
  3. raven211

    raven211 Registered Member

    Joined:
    May 4, 2005
    Posts:
    2,567
    I'll just say that your response is very "young" and so I won't be offended by what seems to be sarcasm. :)
     
  4. Buster_BSA

    Buster_BSA Registered Member

    Joined:
    Nov 29, 2009
    Posts:
    748
    Sarcasm used humoristicly. :)
     
  5. raven211

    raven211 Registered Member

    Joined:
    May 4, 2005
    Posts:
    2,567
    Yeah, I do have a hard time getting that sometimes. :D
     
  6. Buster_BSA

    Buster_BSA Registered Member

    Joined:
    Nov 29, 2009
    Posts:
    748
    netai.net was a poor server, with continous problems with downloads. Mark_ from Sandboxie forum has been so nice to give me hosting.

    The new address (and I hope definitive for a long long time) is:

    http://bsa.isoftware.nl
     
  7. Buster_BSA

    Buster_BSA Registered Member

    Joined:
    Nov 29, 2009
    Posts:
    748
    Anyone knowing methods to take screenshots could you share, please?

    At the moment I have two:

    keybd_event (sending print screen)

    CreateDC/BitBlt
     
  8. Searching_ _ _

    Searching_ _ _ Registered Member

    Joined:
    Jan 2, 2008
    Posts:
    1,988
    Location:
    iAnywhere
  9. Buster_BSA

    Buster_BSA Registered Member

    Joined:
    Nov 29, 2009
    Posts:
    748
    Thanks Searching!
     
  10. Searching_ _ _

    Searching_ _ _ Registered Member

    Joined:
    Jan 2, 2008
    Posts:
    1,988
    Location:
    iAnywhere
    Glad I was able to help.
     
  11. Franklin

    Franklin Registered Member

    Joined:
    May 12, 2005
    Posts:
    2,517
    Location:
    West Aussie
    When I put the two lines below into SB's ini then some apps don't seem to run sandboxed such as notepad, calculator or regedit but Firefox and CCleaner seem to run ok.

    Take the two lines out and those apps run OK?

    XP VM.

    InjectDll=c:\bsa\log_api.dll
    OpenWinClass=TFormBSA
     
  12. Buster_BSA

    Buster_BSA Registered Member

    Joined:
    Nov 29, 2009
    Posts:
    748
    Does it happen the same on a XP not VM?
     
  13. Franklin

    Franklin Registered Member

    Joined:
    May 12, 2005
    Posts:
    2,517
    Location:
    West Aussie
    Have two XP VM's and happens on both.

    Checking out a Vista VM which needs updating to the latest SB beta and BSA. Late here and will be back later.
     
  14. Buster_BSA

    Buster_BSA Registered Member

    Joined:
    Nov 29, 2009
    Posts:
    748
    I´m asking what happens in non VM environments, not in more and different VM´s.
     
  15. DOSawaits

    DOSawaits Registered Member

    Joined:
    Dec 11, 2008
    Posts:
    469
    Location:
    Belgium
    In my case, the sandboxed programs just crash. (Notepad, Calc, you-name-it,...)

    No VM's, plain XP and Win7.
     
  16. Buster_BSA

    Buster_BSA Registered Member

    Joined:
    Nov 29, 2009
    Posts:
    748
  17. Franklin

    Franklin Registered Member

    Joined:
    May 12, 2005
    Posts:
    2,517
    Location:
    West Aussie
    Notepad/calc still won't run sandboxed with the new log_api.dll XP VM.

    BSA still creates a log when trying to run notepad or calc but the apps don't show up.

    Win 7 real system seems to work ok.

    One thing on the real system is that when BSA creates a working folder for the sandbox the folder icon is a normal one. Is that to be expected?

    View attachment Calc - Notepad log.txt
     
  18. Franklin

    Franklin Registered Member

    Joined:
    May 12, 2005
    Posts:
    2,517
    Location:
    West Aussie
    Vista VM everything works OK.
     
  19. Buster_BSA

    Buster_BSA Registered Member

    Joined:
    Nov 29, 2009
    Posts:
    748
    What version of Sandboxie are you using?
     
  20. Franklin

    Franklin Registered Member

    Joined:
    May 12, 2005
    Posts:
    2,517
    Location:
    West Aussie
    Latest beta 3.45.17.

    If nobody can reproduce on XP then I wouldn't worry too much as it works fine on Win 7 and Vista and it's probably just my nLited XP Vm setups.
     
  21. Buster_BSA

    Buster_BSA Registered Member

    Joined:
    Nov 29, 2009
    Posts:
    748
    Could you check if it happens the same with a previous Sandboxie version like 3.45.01 or 3.45.10, please?
     
  22. Franklin

    Franklin Registered Member

    Joined:
    May 12, 2005
    Posts:
    2,517
    Location:
    West Aussie
    3.45.10 is the same, XP VM.

    Firefox, CCleaner, Malwarebytes, XP screensavers, wordpad and cmd.exe will run in the sandbox but not notepad, calculator, explorer or paint.
     
  23. Buster_BSA

    Buster_BSA Registered Member

    Joined:
    Nov 29, 2009
    Posts:
    748
    What version are you using, DOSawaits?
     
  24. DOSawaits

    DOSawaits Registered Member

    Joined:
    Dec 11, 2008
    Posts:
    469
    Location:
    Belgium
    Currently 3.45.16, new log_api didn't make a difference toward the crashing.
     
  25. Buster_BSA

    Buster_BSA Registered Member

    Joined:
    Nov 29, 2009
    Posts:
    748
    I´m unable to reproduce the problem so I´m afraid I don´t know what´s it. :doubt:
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.