Page 1 of 1

Unknown process run in sandboxie automatically

Posted: Mon May 15, 2017 11:03 am
by sbfan
Unknown process run in sandboxie automatically, like as comodo internet security
thank a lot!

Re: Unknown process run in sandboxie automatically

Posted: Mon May 15, 2017 11:54 am
by Barb@Invincea
Hello sbfan,

Can you please provide more information regarding what are you trying to do?
What are your OS, Sandboxie and Antivirus versions?
What's the name of the program you want to run?
Are you encountering errors?

Regards,
Barb.-

Re: Unknown process run in sandboxie automatically

Posted: Mon May 15, 2017 12:57 pm
by sbfan
Barb@Invincea wrote:Hello sbfan,

Can you please provide more information regarding what are you trying to do?
What are your OS, Sandboxie and Antivirus versions?
What's the name of the program you want to run?
Are you encountering errors?

Regards,
Barb.-
no errors
Windows7 64
sandboxie 5.18

Comodo Internet Security 10 vs WannaCry ransomware
https://www.youtube.com/watch?v=KHIuAXkZpSc
unknown process (WannaCry ransomware) automatically run in Comodo sandbox

can sandboxie do the same things?
very hardly to setup in sandboxie
because sandboxie can setup ForceProcess *.exe, but can't setup forced run out of sandboxie Process like explorer.exe
if someone just setup ForceProcess *.exe(unknown process), he can not access the real system(files, registry,etc...)

Feature request:
can setup forced run out of sandboxie process

Re: Unknown process run in sandboxie automatically

Posted: Mon May 15, 2017 1:11 pm
by Barb@Invincea
Hello sbfan,

If you start an application inside the Sandbox, applications spawned from it will be Sandboxed as well (however, nothing is 100% bulletproof, please proceed with caution when handling viruses).
So, for example, if you open Windows Explorer inside Sandboxie, any files launched from that Sandboxed Explorer session will also be Sandboxed.

Please see these entries for examples of how Sandboxie handles ransomware and how it protects your system:
https://www.youtube.com/watch?v=aMtyGNviiRY
https://www.sandboxie.com/index.php?StopRansomware
https://www.sandboxie.com/index.php?Fre ... HowItWorks
https://www.sandboxie.com/index.php?Fre ... rSolutions

Regards,
Barb.-

Re: Unknown process run in sandboxie automatically

Posted: Mon May 15, 2017 2:37 pm
by sbfan
Barb@Invincea wrote:Hello sbfan,

If you start an application inside the Sandbox, applications spawned from it will be Sandboxed as well (however, nothing is 100% bulletproof, please proceed with caution when handling viruses).
So, for example, if you open Windows Explorer inside Sandboxie, any files launched from that Sandboxed Explorer session will also be Sandboxed.

Please see these entries for examples of how Sandboxie handles ransomware and how it protects your system:
https://www.youtube.com/watch?v=aMtyGNviiRY
https://www.sandboxie.com/index.php?StopRansomware
https://www.sandboxie.com/index.php?Fre ... HowItWorks
https://www.sandboxie.com/index.php?Fre ... rSolutions

Regards,
Barb.-
Thank you, sandboxie is very well
start Ransomware in sandboxie manually, sandboxie can protect the system, of cause
But this time wannacry spread through the local area network and automatically running , user cannot running wannacry in sandboxie manually
Comodo internet security sandbox can identify the unknown automatically running process, put it in sandbox automatically, and sandboxie can't do the same things
Sorry, my English is not good

Re: Unknown process run in sandboxie automatically

Posted: Mon May 15, 2017 2:43 pm
by Barb@Invincea
Hello sbfan,

Sandboxie is not an antivirus, so it will not detect viruses and take action based on them.
Thus, you may need to also use an antivirus software (as explained in the links provided before).

You can add Forced Folders to your Sandbox, which may help a bit:
https://www.sandboxie.com/index.php?ForceFolder
https://www.sandboxie.com/index.php?ForceProcess

Regards,
Barb.-

Re: Unknown process run in sandboxie automatically

Posted: Mon May 15, 2017 11:07 pm
by bo.elam
sbfan wrote:Unknown process run in sandboxie automatically, like as comodo internet security
thank a lot!
Hi sbfan, I think most of us wouldn't want Sandboxie to be like Comodo. Is really easy with Sandboxie to protect yourself against malware. What I do is sandbox all files that run in my computer every time they run. Files run sandboxed during their lifetime in the computer. The only exceptions are installers for programs that I am going to install.

I combine using Forced programs, Forced folders and the sandboxed Windows explorer to get things done. Pretty much the whole process of getting files and programs running sandboxed is smooth, automatic and don't require much thinking. The only time I am not using Sandboxie is when the PC is idle. If you start using Sandboxie a little more than you doing now, you wont miss Comodos auto sandboxing of unknown files and likely wont want it either.

Bo