Sandboxie Support

Hey folks,

I'm new to sandboxie, and I'm starting to really like it. When playing around a bit, some ideas how to make this awesome kind of software (IMHO) even a little better:

- Currently, I CAN transfer files from a sandbox to the system - but I CANNOT do the same for individual registry entries (at least I did not find an option for that). Would it be possible to...?

- Those colored borders Sandboxie can drwa around windows - the do not seem to work with Aero (as far as I can tell). But I relay would like to have something more "eye-catching" than those to sharps in the title... So an idea came into my mind: If it where possible, to change the Aero color for individual programms... THAT would be great. But I have far to little knowledge about the Aero engine, so I have no idea if this would be possible at all...

Last but not least: in the "common feature requests" listed here: http://www.sandboxie.com/index.php?Comm ... reRequests I read about including verison number in installer filename. The reason you give for not doing this, is the existence of external links directly to the installer. There WOULD be away around this, which is not even complicated and widely used among the internet: redirections on the server side. You provide an andress, which always links to the current installer file - and the server dynamically resolves this URL accordingly. What about this?

Snehonja wrote:- Currently, I CAN transfer files from a sandbox to the system - but I CANNOT do the same for individual registry entries (at least I did not find an option for that). Would it be possible to...

You might want to read about Registry Access, here:
http://www.sandboxie.com/index.php?Reso ... ssSettings

Snehonja wrote:- Those colored borders Sandboxie can drwa around windows - the do not seem to work with Aero (as far as I can tell). But I relay would like to have something more "eye-catching" than those to sharps in the title... So an idea came into my mind: If it where possible, to change the Aero color for individual programms... THAT would be great. But I have far to little knowledge about the Aero engine, so I have no idea if this would be possible at all...

Something similar was suggested by myself in another thread about a week ago, however you should know that it's not possible right now to tweak the color for just one program, you'll have to change the color of the Aero theme as a whole, which will affect every programs borders.

Guest10 wrote:

Snehonja wrote:- Currently, I CAN transfer files from a sandbox to the system - but I CANNOT do the same for individual registry entries (at least I did not find an option for that). Would it be possible to...

You might want to read about Registry Access, here:
http://www.sandboxie.com/index.php?Reso ... ssSettings

Thanks for your suggestion - but that's nnot what I indended. My point is not to GENERALLY allow a specific registry key to be set from inside a sandbox but to copy ANY (but not all) changed key from inside the sandbox to the real system.

Example:
You have some suspicious file that promisis to tweak something. You do not wnat to execute the programm outside the sandbox, cause you do not trust the author. So you start it inside a sandbox.
You notice two things:
a) it DOES make the promisig tweak, but
b) it does also ruin your system by changing some other keys (to open backdoors, load hooks or whatever)
So NOW you want to transfer the tweaked settings into your real system - but you do not want to transfer the malicious changes, too.

So there should be a possibility to pick individual keys (like you can do with files) and transfer them to your real system. List all changed keys in th content-view and have a context-menu-entry to transfer them (like there is for files) or whatever.

Snehonja wrote: Last but not least: in the "common feature requests" listed here: http://www.sandboxie.com/index.php?Comm ... reRequests I read about including verison number in installer filename. The reason you give for not doing this, is the existence of external links directly to the installer. There WOULD be away around this, which is not even complicated and widely used among the internet: redirections on the server side. You provide an andress, which always links to the current installer file - and the server dynamically resolves this URL accordingly. What about this?

Oh come on is it really that hard to right click and see the installer version in the properties dialogue? Should Tzuk have to spend some time to adjust this when it could take you 2 seconds to know ?

Anyways welcome to the forums and enjoy using Sandboxie.

Snehonja wrote:You have some suspicious file that promises to tweak something. You do not want to execute the program outside the sandbox, cause you do not trust the author. So you start it inside a sandbox.

It sounds like the Contributed Program BSA might provide part of what you want - a list of Registry changes, along with file changes, port accesses and more.
It doesn't provide a way to copy changes from the sandbox though.
Buster Sandbox Analyzer is started before installing a program inside of a sandbox, and then minimized while the install proceeds.
Then at the end of the install, you go back to it and request a report.
It's not a click and forget it type of thing though. Its capabilities are increasing, and can be complicated because of that.
Download it from the first post in that thread.

@D1G1T@L: The filename is not an important issue, I totally agree with you. It doesn't even bother me. Just wanted to provide a possible solution for this "problem".

@Guest10: Thank you very much, that indeed seems to help in my case. Even though it's kind of an overkill as I just want to find out what has chaged in the registry and do not need all the rest. And I still have to edit the registry manually afterwards (which is not a big thing of course).
Would still be nice to include that functionallity into sandboxie itself. As sandboxie have to catch any registry access anyway, it should not be a problem to log those, which are changes, and save them in some file which sandboxie parses and displays in its interface again when asked. And porting them to real registry is no big deal either, as sandboxie can just change them itself (and if sandboxie fails to do so, the program that was called would have faild, too, so that's nothing sandboxie has to worry about but the programs)

This probably isn't much help either, but keep in mind that while a sandbox is in use its Reghive entries are mounted to a Key in the real Registry.
That is, if your Windows logon is Snehonja, and the sandbox is DefaultBox, then while any program is actively using DefaultBox the Registry entries made by the sandboxed programs can be viewed with the Windows Registry Editor program.
The Reghive would be mounted to the real Registry at:
HKEY_USERS\Sandbox_Snehonja_DefaultBox

As soon as the last sandboxed program using that sandbox ends, then this Key is dismounted from the Registry - until a program uses that sandbox again, and also if the sandbox contents were not deleted.