Unknown process run in sandboxie automatically

Ideas for enhancements to the software
Post Reply
sbfan
Posts: 5
Joined: Tue Jan 19, 2010 4:48 pm

Unknown process run in sandboxie automatically

Post by sbfan » Mon May 15, 2017 11:03 am

Unknown process run in sandboxie automatically, like as comodo internet security
thank a lot!

Barb@Invincea
Sandboxie Support
Sandboxie Support
Posts: 2337
Joined: Mon Nov 07, 2016 3:10 pm

Re: Unknown process run in sandboxie automatically

Post by Barb@Invincea » Mon May 15, 2017 11:54 am

Hello sbfan,

Can you please provide more information regarding what are you trying to do?
What are your OS, Sandboxie and Antivirus versions?
What's the name of the program you want to run?
Are you encountering errors?

Regards,
Barb.-

sbfan
Posts: 5
Joined: Tue Jan 19, 2010 4:48 pm

Re: Unknown process run in sandboxie automatically

Post by sbfan » Mon May 15, 2017 12:57 pm

Barb@Invincea wrote:Hello sbfan,

Can you please provide more information regarding what are you trying to do?
What are your OS, Sandboxie and Antivirus versions?
What's the name of the program you want to run?
Are you encountering errors?

Regards,
Barb.-
no errors
Windows7 64
sandboxie 5.18

Comodo Internet Security 10 vs WannaCry ransomware
https://www.youtube.com/watch?v=KHIuAXkZpSc
unknown process (WannaCry ransomware) automatically run in Comodo sandbox

can sandboxie do the same things?
very hardly to setup in sandboxie
because sandboxie can setup ForceProcess *.exe, but can't setup forced run out of sandboxie Process like explorer.exe
if someone just setup ForceProcess *.exe(unknown process), he can not access the real system(files, registry,etc...)

Feature request:
can setup forced run out of sandboxie process

Barb@Invincea
Sandboxie Support
Sandboxie Support
Posts: 2337
Joined: Mon Nov 07, 2016 3:10 pm

Re: Unknown process run in sandboxie automatically

Post by Barb@Invincea » Mon May 15, 2017 1:11 pm

Hello sbfan,

If you start an application inside the Sandbox, applications spawned from it will be Sandboxed as well (however, nothing is 100% bulletproof, please proceed with caution when handling viruses).
So, for example, if you open Windows Explorer inside Sandboxie, any files launched from that Sandboxed Explorer session will also be Sandboxed.

Please see these entries for examples of how Sandboxie handles ransomware and how it protects your system:
https://www.youtube.com/watch?v=aMtyGNviiRY
https://www.sandboxie.com/index.php?StopRansomware
https://www.sandboxie.com/index.php?Fre ... HowItWorks
https://www.sandboxie.com/index.php?Fre ... rSolutions

Regards,
Barb.-

sbfan
Posts: 5
Joined: Tue Jan 19, 2010 4:48 pm

Re: Unknown process run in sandboxie automatically

Post by sbfan » Mon May 15, 2017 2:37 pm

Barb@Invincea wrote:Hello sbfan,

If you start an application inside the Sandbox, applications spawned from it will be Sandboxed as well (however, nothing is 100% bulletproof, please proceed with caution when handling viruses).
So, for example, if you open Windows Explorer inside Sandboxie, any files launched from that Sandboxed Explorer session will also be Sandboxed.

Please see these entries for examples of how Sandboxie handles ransomware and how it protects your system:
https://www.youtube.com/watch?v=aMtyGNviiRY
https://www.sandboxie.com/index.php?StopRansomware
https://www.sandboxie.com/index.php?Fre ... HowItWorks
https://www.sandboxie.com/index.php?Fre ... rSolutions

Regards,
Barb.-
Thank you, sandboxie is very well
start Ransomware in sandboxie manually, sandboxie can protect the system, of cause
But this time wannacry spread through the local area network and automatically running , user cannot running wannacry in sandboxie manually
Comodo internet security sandbox can identify the unknown automatically running process, put it in sandbox automatically, and sandboxie can't do the same things
Sorry, my English is not good

Barb@Invincea
Sandboxie Support
Sandboxie Support
Posts: 2337
Joined: Mon Nov 07, 2016 3:10 pm

Re: Unknown process run in sandboxie automatically

Post by Barb@Invincea » Mon May 15, 2017 2:43 pm

Hello sbfan,

Sandboxie is not an antivirus, so it will not detect viruses and take action based on them.
Thus, you may need to also use an antivirus software (as explained in the links provided before).

You can add Forced Folders to your Sandbox, which may help a bit:
https://www.sandboxie.com/index.php?ForceFolder
https://www.sandboxie.com/index.php?ForceProcess

Regards,
Barb.-

bo.elam
Sandboxie Guru
Sandboxie Guru
Posts: 2809
Joined: Wed Apr 22, 2009 9:17 pm

Re: Unknown process run in sandboxie automatically

Post by bo.elam » Mon May 15, 2017 11:07 pm

sbfan wrote:Unknown process run in sandboxie automatically, like as comodo internet security
thank a lot!
Hi sbfan, I think most of us wouldn't want Sandboxie to be like Comodo. Is really easy with Sandboxie to protect yourself against malware. What I do is sandbox all files that run in my computer every time they run. Files run sandboxed during their lifetime in the computer. The only exceptions are installers for programs that I am going to install.

I combine using Forced programs, Forced folders and the sandboxed Windows explorer to get things done. Pretty much the whole process of getting files and programs running sandboxed is smooth, automatic and don't require much thinking. The only time I am not using Sandboxie is when the PC is idle. If you start using Sandboxie a little more than you doing now, you wont miss Comodos auto sandboxing of unknown files and likely wont want it either.

Bo

Post Reply

Who is online

Users browsing this forum: No registered users and 0 guests