Page 1 of 1
BSA+Sandboxie Portable
Posted: Fri May 04, 2012 8:04 pm
by gjf
The constantly updated portable Buster Sandbox Analyzer + Sandboxie system is located at
http://tools.safezone.cc/gjf/Sandboxie-portable.zip
All manuals are within the archive.
If you have some problems and/or suggestions - please PM me.
Posted: Fri May 04, 2012 8:30 pm
by Buster
I noticed bsa.conf contains next lines:
Code: Select all
[BSA]
InjectDll=C:\Program Files\Sandboxie\Buster Sandbox Analyzer\sbiextra.dll
InjectDll=C:\Program Files\Sandboxie\Buster Sandbox Analyzer\antidel.dll
InjectDll=C:\Program Files\Sandboxie\Buster Sandbox Analyzer\LAPI.dll
OpenWinClass=TFormBSA
ConfigLevel=6
Enabled=y
NotifyInternetAccessDenied=y
BoxNameTitle=n
BorderColor=#0000FF
OpenFilePath=C:\Sandbox\TEST!!!\
"NotifyDirectDiskAccess=y" is missing. Without that parameter, BSA will be unable to notice direct disk writing behaviour.
Other two important parameters are:
ProcessLimit1=20
ProcessLimit2=30
That is used to avoid certain type of malware that floods the system making it unstable. Normally none (malicious or not) application will be running over 30 processes at the same time.
More things...
You include "DLLLDR.EXE". That file is obsolete and can be removed because it is not used anymore.
The same happens with "HideDriver.sys" and "HideDriverGUI.exe". They were replaced by BSA.SYS. Anyway someone could use HideDriver instead BSA´s own driver, so I could understand why it is kept in the package.
"regdump.exe" is dropped everytime BSA needs it, so it is unnecesary to have it in the package.
The same for "sigcheck.exe" and "ssdeep.exe".
Posted: Sun Aug 26, 2012 8:21 pm
by gjf
Thanks, Buster, but I believe you mean Sandboxie.ini file, not BSA.conf.
All your suggestions will be used.
Posted: Tue Aug 28, 2012 9:54 am
by otreus
don't work for me (win8 64bit) and in the archive I haven't find the Faq for using it. Thanks
Posted: Tue Aug 28, 2012 10:08 am
by Buster
otreus wrote:don't work for me (win8 64bit) and in the archive I haven't find the Faq for using it. Thanks
Download Buster Sandbox Analyzer and learn to configure it by yourself.
Posted: Tue Aug 28, 2012 2:51 pm
by gjf
otreus, x64 is not supported yet by this portable system. You should install Sandboxie and BSA and configure them by yourself.
Re: BSA+Sandboxie Portable
Posted: Sat Oct 11, 2014 7:11 am
by brdlstone007
Don't work for me (win8 64bit) and in the document I haven't find the Faq for utilizing it. Much appreciated
Re: BSA+Sandboxie Portable
Posted: Wed Jun 07, 2017 6:57 am
by Gioanvm
Could you please provide the password for the zip file? Or upload an unprotected zip file?
Re: BSA+Sandboxie Portable
Posted: Wed Jun 07, 2017 10:27 am
by Barb@Invincea
Hello Gioanvm,
Hopefully the user will see the message and give you the password, however I tried unzipping the file using a blank password (just hit enter) and it seemed to work.
Regards,
Barb.-
Re: BSA+Sandboxie Portable
Posted: Wed Jun 07, 2017 11:23 am
by Gioanvm
Hi Barb.
Will give that a try. Thanks
Re: BSA+Sandboxie Portable
Posted: Wed Jun 07, 2017 4:35 pm
by Gioanvm
Hi Barb,
I tried extracting it with WinRAR and IZArc but no luck.
Re: BSA+Sandboxie Portable
Posted: Thu Jun 08, 2017 10:30 am
by Barb@Invincea
Hello Gioanvm,
You'll have to wait for the user to provide the password.
I can decompress it with 7zip without entering the password, but the files are empty. I was hoping to find the password somewhere in there, but no luck.
You should also be able to find the tools (separate files) here:
https://www.sandboxie.com/index.php?Con ... dUtilities
Regards,
Barb.-
Re: BSA+Sandboxie Portable
Posted: Thu Aug 10, 2017 6:32 am
by gjf
The link without password: hxxp://www5.zippyshare.com/v/6wcBDcHb/file.html
However the development is stopped. I am not interested any more in this project as long as BSA is not supported in Sandboxie.
Re: BSA+Sandboxie Portable
Posted: Sat Sep 16, 2017 4:02 am
by Gioanvm
Thanks gjf