quick recovery of files

[urkain]

I searched but couldn't find an answer. I don't fully understand the concept of using the recovery function. If you are inside the sandbox with an infected file and recover it to your host machine, doesn't that infect your host machine and defeat the purpose of even using sandboxie?

Thanks for your time.

[CPB]

Yes, but when you have a known 'clean' file, would you plan on keeping it in the sandbox forever?

[bo.elam]

urkain, those functions are designed so you can recover files that you download and want to keep in your hard drive. For example, if you download a video and a couple of PDF files while browsing and you like to be able to keep them, for that to be possible, you need to set either Quick or immediate recovery. Also, it is possible to recover viruses so you have to be careful about what you download and recover.

I don't know if you saw this. It is about the recovery function.

http://www.sandboxie.com/index.php?QuickRecovery

http://www.sandboxie.com/index.php?ImmediateRecovery

Bo

[urkain]

bo I did see those, however they don't say anything about the security of those files you are moving to the host machine. I was hoping you could move the file to a quarantine first to clean them and then move them to your host machine.

[bo.elam]

urkain, Sandboxie is not gonna tell you nothing about whether files in the sandbox are safe or not. Thats for you and your antivirus to figure out. If you recover a infected file and execute it, you ll get hurt.

Bo

[urkain]

I'm not saying it should scan for you, just have a quarantine to use a software of your choice to clean it. Malware can attach itself to a file, you can clean the file but it can have persistence located elsewhere. A quarantine can help it be safely moved without as much of a worry with persistence.