Keylogging and scraping screen images

[username0]

Windows 10/IE sandboxied. I have started the AntiTest utility of SpyShelter (not sandboxied) to check keystroke encryption and scraping screen images. With AntiTest keylogging active I have typed information into Internet Explorer sandboxied. The AntiTest utility have captured everything I was typing. I assume that should have been a mishmash of numbers and punctuation, since IE is running sanboxied -- isolated from the AntiTest. Why not mishmash? Sandboxie does not prevent keyloggers from keylogging (IE sandboxied/AntiTest not sandboxied) and scraping screen images, does it? Thanks!

[Mr.X]

http://www.sandboxie.com/index.php?Freq ... KeyLoggers

[Craig@Invincea]

As Mr.X linked too..If it's already running outside of the SB, then nope. And keyloggers are tough to detect. http://www.sandboxie.com/index.php?DetectingKeyLoggers

Best advice, surf with SBIE.

[Peter2150]

It helps to understand something about SBIE. It does nothing to prevent a program that is allowed to run from doing it what it wants to do, but what it does is protect your system.

A test I ran several years ago. I had a nasty virus that first I ran unsandboxed. It dazzled the screen with flashing displays, and there was no way to kill it, except a power reset. On reboot it owned the system. Completely lost control of the computer. When run sandboxed, same dazzling screen display. Couldn't get to the systray to use the sbie system Icon. Same thing, had to use power reset, BUT, on reboot system was fine. Everything was contained in the sandbox folder, which I simply deleted. This is what SBIE excels in doing.

So what about keyloggers. Frankly I think a lot of unwarranted fear mongering by companies selling keylogger software. Ask yourself this. How can a keylogger, log keys if it can't get installed on your system. It can't. So the object should be to make sure only the software you trust gets installed on your system. But, what if you make a mistake?

Solution to that, Backup, backup, backup. Before I install anything new, I update disk images, so if I don't like what is happening, I just restore the system and make the new stuff gone.

[Craig@Invincea]

@Peter2150
Exactly. Well done.

[Mr.X]

Solution to that, Backup, backup, backup. Before I install anything new, I update disk images, so if I don't like what is happening, I just restore the system and make the new stuff gone.

Fully agreed although I don't backup/image my system drive anymore, too much of a hassle and waste of time in my opinion. To test new software I rely completely in Shadow Defender, a simple restart is easier and not time consuming as an image restore.
It is worth mentioning I still doing images of my system drive but just of a major disaster such as a sudden occurrence of bad sectors or dead HDD.

[Peter2150]

Solution to that, Backup, backup, backup. Before I install anything new, I update disk images, so if I don't like what is happening, I just restore the system and make the new stuff gone.

Fully agreed although I don't backup/image my system drive anymore, too much of a hassle and waste of time in my opinion. To test new software I rely completely in Shadow Defender, a simple restart is easier and not time consuming as an image restore.
It is worth mentioning I still doing images of my system drive but just of a major disaster such as a sudden occurrence of bad sectors or dead HDD.

Hi Mr X

We run very similar configurations. I love Shadow Defender, but you can't test install something requiring a reboot. Give Macrium Reflect v6 Home version a whirl, and you won't look back. My C: drive currently sits at 147gb. Full image time is 18 minutes, but an incremental image takes on average about 1:15 minutes. Complicated, no. I invoke by simply double clicking an icon on my desktop. I install something and don't like it the restore time initiating the restore in windows takes on average about 1:30 minutes.

Pete

[Mr.X]

Hi Mr X

We run very similar configurations. I love Shadow Defender, but you can't test install something requiring a reboot. Give Macrium Reflect v6 Home version a whirl, and you won't look back. My C: drive currently sits at 147gb. Full image time is 18 minutes, but an incremental image takes on average about 1:15 minutes. Complicated, no. I invoke by simply double clicking an icon on my desktop. I install something and don't like it the restore time initiating the restore in windows takes on average about 1:30 minutes.

Pete

Thank you Pete, I completely forgot about programs wanting to reboot...
Sounds interesting so I likely give MR v6 home a whirl. Currently I have license for Terabyte Unlimited IFD, IFL and IFW. Haven't tried incremental backups with it though.

[Peter2150]

Hi Mr X

We run very similar configurations. I love Shadow Defender, but you can't test install something requiring a reboot. Give Macrium Reflect v6 Home version a whirl, and you won't look back. My C: drive currently sits at 147gb. Full image time is 18 minutes, but an incremental image takes on average about 1:15 minutes. Complicated, no. I invoke by simply double clicking an icon on my desktop. I install something and don't like it the restore time initiating the restore in windows takes on average about 1:30 minutes.

Pete

Thank you Pete, I completely forgot about programs wanting to reboot...
Sounds interesting so I likely give MR v6 home a whirl. Currently I have license for Terabyte Unlimited IFD, IFL and IFW. Haven't tried incremental backups with it though.

I also have a license for the Terabyte stuff as I use it as a secondary backup. But all images full, and incremental take the same time for me about 18 minutes. Same with restore. But Macrium got the speed thing down, and it's totally reliable. I've done some horrible things testing it and doesn't fail

[Mr.X]

I also have a license for the Terabyte stuff as I use it as a secondary backup. But all images full, and incremental take the same time for me about 18 minutes. Same with restore. But Macrium got the speed thing down, and it's totally reliable. I've done some horrible things testing it and doesn't fail

Alright, I think gonna try it tomorrow or next week thank you for the recommendation.