Trust No Program

Using Sandboxie for installing applications

If it doesn't fit elsewhere, it goes here

Using Sandboxie for installing applications

Postby Guest » Sat May 16, 2009 6:52 am

I am just trying out Sandboxie and would like to use it to install applications of doubtful origin. I don't know if this would work.

Also, when I save files to the hard disk, and close the application, of course the files saved are not on the final hard disk destination until it is saved there by sandboxie. This is not the problem, the problem is that I was only able to save the files one at a time. Is there a way to save all files?
Thanks
Guest
 

Re: Using Sandboxie for installing applications

Postby Guest10 » Sat May 16, 2009 12:21 pm

Many applications can be installed, and run, from inside of a sandbox folder. Not all, though. A program that would normally install a driver and require a reboot to work, will not be able to do so. Also, a program might try to access resources that are denied to it by Sandboxie, for security reasons. The nice thing, though, is that when you delete the contents of the sandbox, the program and all changes that it tried to make are gone. If you download an installer for a program, and that installer is still inside a sandbox that is not set to auto-delete, just running the installer from that location would install it inside the sandbox folder.
If the programs installer is stored outside of the sandbox folders: create a new sandbox for it, then right-click the installer and "Run Sandboxed" - choosing the sandbox you want to use, when asked. Always watch for the #...# in the installer's title bar, to make sure that the installer is running sandboxed.

As far as saving downloaded files, since you mention that you are closing the application that downloaded the files, I assume that what you are referring to is the Quick Recovery window. The files should all be shown listed under the download folder, and the download folder will be 'selected'. So all you need do to recover them all at once is to click on the Recover button while the download folder is selected. Or you can individually click on a downloaded file to recover it.
Paul
XP Pro SP3 (Admin), Zone Alarm Pro Firewall, Malwarebytes Pro, Firefox 32, Thunderbird 31.
Sandboxie user since March 2007.
Guest10
 
Posts: 4851
Joined: Sun Apr 27, 2008 10:24 pm
Location: Ohio, USA

Postby Guest » Sat May 16, 2009 12:47 pm

I see what you mean about drivers being installed. This means that Snadboxie can't be used for installing unknown programs.

Unfortunately, a lot of programs require administrative rights to be installed also. Since Sandboxie cannot be used for installing programs, there appears to be no way to stop a virus loaded program installer. This is disappointing.

How does one safely install a program of unknown or doubtful source?
Thanks
Guest
 

Postby Buster » Sat May 16, 2009 1:46 pm

Anonymous wrote:I see what you mean about drivers being installed. This means that Snadboxie can't be used for installing unknown programs.


I see you are a bit confused.

There are not "unknown" programs.

You can not install sandboxed those programs which require a driver, but most of the software don´t need them.
Buster
 
Posts: 2388
Joined: Mon Aug 06, 2007 7:38 pm

Postby Guest10 » Sat May 16, 2009 2:06 pm

Anonymous wrote:I see what you mean about drivers being installed. This means that Snadboxie can't be used for installing unknown programs.
Why not? Not that many programs install drivers. Drivers that are already installed on your computer can be used.
It's just that a new driver can't be installed by the program being tested.
Anonymous wrote:Unfortunately, a lot of programs require administrative rights to be installed also. Since Sandboxie cannot be used for installing programs, there appears to be no way to stop a virus loaded program installer. This is disappointing.
There are users who post in this forum, who try out virus infected programs all of the time, to see if anything can break out of the sandbox.
Not me, though. I don't have an interest in doing so.
(I see that Buster has replied to this thread. He is one of those who often tries out malware programs under Sandboxie)

Plus, there are also programs that allow you to set up a virtual session for trying out programs that do not require a reboot after the install.
I often use Returnil to see how to configure Sandboxie, and see how to allow a program to work, that is being denied access to resources blocked by Sandboxie. If I can identify a resource that can be safety added to a user's configuration, and it allows a program to work while under Sandboxie's control, then a restart of my computer after my tests will insure that no remnants of the install will remain to clutter up my hard disk or Registry.
Paul
XP Pro SP3 (Admin), Zone Alarm Pro Firewall, Malwarebytes Pro, Firefox 32, Thunderbird 31.
Sandboxie user since March 2007.
Guest10
 
Posts: 4851
Joined: Sun Apr 27, 2008 10:24 pm
Location: Ohio, USA

Postby Guest » Sat May 16, 2009 11:10 pm

Buster,
When I say that a program is "Unknown" I mean that the program passes the virus check and comes from a suspect source so that it may still contain a virus. This happened to me recently and damaged the system so it couldn't boot.

Now, with the Sandboxie. Assuming that the program can be installed in the Sandboxie environment, how do you copy all the files to the correct location. The files will not be located in the Recovery area since we don't know where the installer will save files to.
Guest
 

Postby bs1 » Sun May 17, 2009 12:56 am

Anonymous wrote: Now, with the Sandboxie. Assuming that the program can be installed in the Sandboxie environment, how do you copy all the files to the correct location. The files will not be located in the Recovery area since we don't know where the installer will save files to.

I occasionally test audio and video programs in sandboxes. As part of the installation process, the installer (which is sandboxed) typically shows the default location (usually C:\Program Files) where the files will be saved, and gives me the option to select an alternate location. Now if I choose to recover a tested program, the associated files are automatically saved by Sandboxie to that same location (i.e., C:\Program Files or the alternate) on my "real" hard drive.
Desktop: XP Pro SP3 32bit, Sandboxie 3.72, NOD32 AV, MBAM (free), Windows Firewall + router
Laptop: Win7 Home Pro 64bit, Sandboxie 3.76, Panda Cloud (free), Windows Firewall
bs1
 
Posts: 555
Joined: Fri May 16, 2008 5:32 pm

Postby Guest » Sun May 17, 2009 2:22 am

That sounds simple. Unfortunately, most thisngs that sound simple are very complicated.
I assume that you include the C:\Program Files in the recovery are. Most programs I install also write to the windows directory and also somewhere in the Documents and Settings directory. I suppose I would also need to include these in the recovery area. Then, most programs I install, also write to the registry, what happens to these changes? If the installer writes somewhere else, those files need to be copied individually, I think.

Am I correct with all this?
Thanks
Guest
 

Postby Buster » Sun May 17, 2009 4:13 am

Make it simple: if after testing a certain software you are satisfied with it then install it again in the real system.
Buster
 
Posts: 2388
Joined: Mon Aug 06, 2007 7:38 pm

Postby Guest » Sun May 17, 2009 4:48 am

Yes, simpler is better. Thanks.

My original question hasn't been answered. Under View Files and Folders, is it possible to copy all files saved in a folder, to the real folder instead of copying files individually?
Thanks
Guest
 

Postby mikew » Wed May 27, 2009 2:35 am

it looks like when you view files and folders, you can only recover individual files at a time. the right click menu is grayed out for full folders. so i guess what you would need to do is add program files directory to your quick recovery folders, then initiate a quick recovery, and recover to same folder.

bs1 wrote: Now if I choose to recover a tested program, the associated files are automatically saved by Sandboxie to that same location (i.e., C:\Program Files or the alternate) on my "real" hard drive.


how can you recover the entire program files directory, without adding it to quick recovery? i think this is what he is asking.
mikew
 

Postby Guest » Wed May 27, 2009 9:46 am

I now think that installing programs in a sandbox should only be considered a test. If it works ok, then install again in the real world. Otherwise, easy copying of files installed in the Program Files, Documents and Settings, Windows directories and the registry copying needs to be solved.

As it was stated before, simpler is better.
And this solution is only acceptable for small programs. I don't think that running large installers would be suitable to be run inside a sandbox.
Guest
 

Postby tzuk » Wed May 27, 2009 11:41 am

That depends on the installer. Large is not necessarily complex. Complex also usually works.

In any case, you're not "supposed" to try to move a complete installation out of the sandbox.

Use software in the sandbox for as long as you wish (even forever), but when you want it outside the sandbox, just reinstall it.
tzuk
tzuk
Site Admin
 
Posts: 16076
Joined: Tue Jun 22, 2004 5:57 pm

Postby dynarx » Thu May 28, 2009 4:39 am

...and one day, should you still want to copy multiple files (data files, say, not program files, tzuk has given the best answer for programs) from the sandbox to the real system, open Sandboxie Control, right mouse click the sandbox's name, select Explore Contents, browse to the sandboxed versions of the files and use drag and drop (or copy and paste) to recover them to a 'real' folder.

Cheers, all,
D
dynarx
 
Posts: 174
Joined: Tue Apr 03, 2007 2:31 am
Location: New South Wales, Australia

Postby mikew » Thu May 28, 2009 5:04 am

yeah, i'm starting to think that i should just leave all my programs installed inside the sandbox, and never bother to install them on the real system. "trust no program" indeed, but continue to use them!
mikew
 

Next

Return to Anything Else

Who is online

Users browsing this forum: No registered users and 3 guests