Running an anti-virus within a sandbox?

[Unknown_User_451]

I have had a rather paranoid discussion about the SandBoxIE + LUA as a possible replacement to a real-time AV protection.

We came to an idea about having a scanner-only AV (without any heuristics|proactive|self-defence|etc capabilityes that demand for elevated privileges of an AV process) to be started within the same sandbox where a file in question is saved.

The doubt was about a possible malware running within the same sandbox which could affect the AV's capability to scan a file properly.

Does the SandBoxIE v3.0 prevent the injection|planting of a file-I/O filters?

[wraithdu]

The programs/files that run/reside in the sandbox still physically exist on the host system (or wherever your sandbox location). Your normal antivirus can scan them just fine.