Overclock.net › Forums › Software, Programming and Coding › Networking & Security › Program Spotlight: Sandboxie
New Posts  All Forums:Forum Nav:

Program Spotlight: Sandboxie

post #1 of 5
Thread Starter 
And so begins the first part of my multi part series highlighting the best of the "lesser" known security programs. I'm going to start by highlighting a very simple, yet very powerful program called sandboxie

Sandboxie

Sandboxie works as a program "sandbox". Whatever runs inside the sandbox, stays inside the sandbox. You can place any program, but more importantly, any browser in the sandbox. Any changes made to your computer are "virtualized" - meaning they are not actually made, but emulated (in a way) in a secure environment safely away from your files. Furthermore, all programs that are running sandboxed have their privileges dropped to access important files and folders. It also gives you the option to move any files you want from the sandbox to your computer.

The power of this is that you can surf the net with relative impunity because virtually nothing can do damage to your computer if your browser is running inside sandboxie. Best of all, if anything does happen, simply delete the sandbox, open a new sandbox, and everything is good as new.

Installation
Installation is easy, an the download for it can be found here

After installation the first thing you want to do is set up your main sandboxes.
1) When you are presented with a screen titled "Sandboxie Control". Right click the "Sandbox Default" and rename to "Sandbox Programs"
2) Go to "Sandbox - Create New Sandbox" and name it “Browsingâ€
3) Go to “Sandbox - Create New Sandbox†and name it “Riskyâ€
Next, you want to configure the way sanboxie behaves in windows.
1) On the main sandboxie screen click on “Configureâ€, then click “Windows Shell Integrationâ€
2) Ensure all boxes are checked under “Start Sandboxie Control†unless you don’t want sandboxie to start on windows startup
3) If you want a desktop or quick launch button, simply press “Add Shortcut Icons†with the corresponding boxes checked
4) Under “‘Run Sandboxed’ Actionsâ€, uncheck “Add sandboxes as targets for ‘Send To’ actionâ€
Now that you have your sandboxes and proper integration with windows, it’s time to tweak the sandboxes to better serve their purpose.
Browsing Sandbox:
- On the main Sandboxie window, right click “Sandbox Browsing†and select “Sandbox Settingsâ€
- go to “Recovery, then “Quick Recoveryâ€, then remove all folders and add your default downloads folder for your browser
- go to “Immediate Recover†and check “Enable Immediate Recoveryâ€
Programs Sandbox:
- Keep Defaults
Risky Sandbox:
- Under settings, recovery choose your browsers downloads folder again, and delete all other folders
- under settings, immediate recovery, enable immediate recovery
- under ‘Deleteâ€, “Delete Invocationâ€, check “Automatically delete contents of sandboxâ€

For your every day usage of sandboxie
If you buy a sandboxie liscense (a one time cost) it will automatically sandbox programs you select it to on their startup. otherwise you need to manually select them to be sandboxed.

How to move files from the sandbox to the regular computer:
- Any folder under quick recovery will give you the option to keep the file when you go to delete the sandbox under the quick recovery tab
- Any folder under quick recovery and with the immediate recovery option enabled will ask you if you want to move it out of the sandbox as soon as it is created. If you chose not to move it then you can always go to quick recovery and find it later
- for files and folders not under quick recovery, in the main sandboxie window, click “Viewâ€, “Files and Foldersâ€, find the file you want to move out, right click, and select either “Recover to Same Folder, or “Recover to Any Folderâ€.
How to delete the contents of a sandbox:
- under the main sandboxie window, right click the sandbox you wish to delete and select ‘Delete Contentsâ€.
To access your web browser sandboxed when surfing “safer†website, either:
- click on the desktop icon created
- right click your browser and select “run sandboxedâ€, then select “Browserâ€
- right click on “Sandboxed Browsing†in the main Sandboxie Control window, hover over “Run Sandboxedâ€, and select “Run Web Browserâ€
- right click the tray icon, hover over “Browserâ€, and select “Run Web Browserâ€
*It is recommended to delete this sandbox every once in a while
*Sandboxie will prompt you as soon as a file finishes downloading whether you want to immediately move it from the sandbox to the regular computer.

To access a program sandboxed, either:
- right click the program and select “run sandboxedâ€, then select “Programsâ€
- right click on “Sandboxed Programs†in the main Sandboxie Control window, hover over “Run Sandboxedâ€, and select “Run From Start Menu†or “Run Windows Explorerâ€
- right click the tray icon, hover over “Programsâ€, and select “Run From Start Menu†or “Run Windows Explorerâ€
*If an installer is run in the sandbox, the program will be delete unless you recover it
*If you delete the contents of the sandbox after running a program, all changes and files/folders made by the program will be deleted, so make sure to recover all files you want to save
*If you have a large program and get an error about file size, go to the programs sandbox settings, “File Migration†and change the size to as high as you want/need
*Larger programs may take a bit to load up at first or after the sandbox has been deleted, but will load up fast all subsequent times

Notes on the Risky Sandbox:
* The sandbox contents will automatically be deleted after the program/browser is closed
* notes for both the browser and programs sandbox apply here as well
Good Ol' Bob
(15 items)
 
  
CPUMotherboardGraphicsGraphics
Intel Core i7-950 ASUS P6X58D LGA 1366 EVGA GeForce GTX 470 EVGA GeForce GTX 470 
RAMHard DriveOptical DriveOS
CORSAIR XMS3 6GB (3 x 2GB) 240-Pin DDR3 1600 1TB Western Digital LG DVD-RW Windows 7 x64 Home Premium 
MonitorKeyboardPowerCase
Acer P243W 24" Logitech K200 600W NZXT Tempest 
MouseMouse PadAudio
Logitech g9x X TRAC PADS PRO Senheisser HD555 
  hide details  
Reply
Good Ol' Bob
(15 items)
 
  
CPUMotherboardGraphicsGraphics
Intel Core i7-950 ASUS P6X58D LGA 1366 EVGA GeForce GTX 470 EVGA GeForce GTX 470 
RAMHard DriveOptical DriveOS
CORSAIR XMS3 6GB (3 x 2GB) 240-Pin DDR3 1600 1TB Western Digital LG DVD-RW Windows 7 x64 Home Premium 
MonitorKeyboardPowerCase
Acer P243W 24" Logitech K200 600W NZXT Tempest 
MouseMouse PadAudio
Logitech g9x X TRAC PADS PRO Senheisser HD555 
  hide details  
Reply
post #2 of 5
Can you do one of this aswell.
www.glaryutilities.com/
www.hijackfree.com/en/hijackfree/
http://www.niksoft.at/download/start...startdreck.htm
post #3 of 5
Honestly, this USED to be a great program, until they started having paid versions and limited functionality in the free version for x64 systems, and whatever else was introduced after Windows Vista/7 came out. Great program for XP no doubt. Probably wrong on one of these things, been a while since I attempted to use it, just know that when I tried it didn't like Windows 7 and was asking me to pay for this and that and advertisements were noticeable enough to make me uninstall. Shame really.
Gaming
(23 items)
 
  
CPUMotherboardGraphicsGraphics
AMD Phenom II X6 1090T Crosshair IV Formula GTX 560 GTX 580 
RAMRAMRAMRAM
G. Skill F3-12800CL6D-4GBPI G. Skill F3-12800CL6D-4GBPI G. Skill F3-12800CL6D-4GBPI  G. Skill F3-12800CL6D-4GBPI 
Hard DriveHard DriveHard DriveOptical Drive
Seagate Hard Drive Seagate Hard Drive Crucial M4 SSD Sony Optiarc 
CoolingOSMonitorMonitor
Corsair H70 Windows 7 Professional x64 ASUS VH242H 23" Monitor ASUS VH242H 23" Monitor 
MonitorKeyboardPowerCase
Samsung SyncMaster 906BW 19" Monitor Logitech G15 Corsair 1K PSU Lian-Li 70A 
MouseMouse PadAudio
Logitech Performance MX Razer Vespula HT Omega Pro+ 
  hide details  
Reply
Gaming
(23 items)
 
  
CPUMotherboardGraphicsGraphics
AMD Phenom II X6 1090T Crosshair IV Formula GTX 560 GTX 580 
RAMRAMRAMRAM
G. Skill F3-12800CL6D-4GBPI G. Skill F3-12800CL6D-4GBPI G. Skill F3-12800CL6D-4GBPI  G. Skill F3-12800CL6D-4GBPI 
Hard DriveHard DriveHard DriveOptical Drive
Seagate Hard Drive Seagate Hard Drive Crucial M4 SSD Sony Optiarc 
CoolingOSMonitorMonitor
Corsair H70 Windows 7 Professional x64 ASUS VH242H 23" Monitor ASUS VH242H 23" Monitor 
MonitorKeyboardPowerCase
Samsung SyncMaster 906BW 19" Monitor Logitech G15 Corsair 1K PSU Lian-Li 70A 
MouseMouse PadAudio
Logitech Performance MX Razer Vespula HT Omega Pro+ 
  hide details  
Reply
post #4 of 5
Thread Starter 
There are 3 functionality differences between the free version and the paid version:

1) There is a 3 second splash screen when you start something sandboxed after 30 days. A small time to wait for a powerful product they are allowing you to use for free.

2) You can not set programs to automatically start sandboxed, you need to open them sandboxed.

3) You can't run a program in multiple sandboxes.

As per the problems associated with Windows x64 (kernel patch protection), they are overcome to an extent by droping the rights of programs like you are running windows on a Limited User Account (LUA). All security software on x64 has this problem though, so it is not just Sandboxie.

You can read more here
and
Here

Although it is not the end all of security software, it is a great companion to security software.
Edited by lucido - 4/22/11 at 12:04am
Good Ol' Bob
(15 items)
 
  
CPUMotherboardGraphicsGraphics
Intel Core i7-950 ASUS P6X58D LGA 1366 EVGA GeForce GTX 470 EVGA GeForce GTX 470 
RAMHard DriveOptical DriveOS
CORSAIR XMS3 6GB (3 x 2GB) 240-Pin DDR3 1600 1TB Western Digital LG DVD-RW Windows 7 x64 Home Premium 
MonitorKeyboardPowerCase
Acer P243W 24" Logitech K200 600W NZXT Tempest 
MouseMouse PadAudio
Logitech g9x X TRAC PADS PRO Senheisser HD555 
  hide details  
Reply
Good Ol' Bob
(15 items)
 
  
CPUMotherboardGraphicsGraphics
Intel Core i7-950 ASUS P6X58D LGA 1366 EVGA GeForce GTX 470 EVGA GeForce GTX 470 
RAMHard DriveOptical DriveOS
CORSAIR XMS3 6GB (3 x 2GB) 240-Pin DDR3 1600 1TB Western Digital LG DVD-RW Windows 7 x64 Home Premium 
MonitorKeyboardPowerCase
Acer P243W 24" Logitech K200 600W NZXT Tempest 
MouseMouse PadAudio
Logitech g9x X TRAC PADS PRO Senheisser HD555 
  hide details  
Reply
post #5 of 5
Have you ever used api guard? Similar a very good one aswell especially if you want to analyze malware
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Networking & Security
Overclock.net › Forums › Software, Programming and Coding › Networking & Security › Program Spotlight: Sandboxie