Is there a way to tell...

If it doesn't fit elsewhere, it goes here
Post Reply
someoneinneed

Is there a way to tell...

Post by someoneinneed » Thu Feb 08, 2007 1:46 am

I was thinking that I might have been attacked through a browser exploit, so I downloaded sandboxie. If I went back to that site, will there be some indication within sandboxie that said site was trying to change my computer?

Unknown_User_274
Posts: 0
Joined: Wed Dec 31, 1969 7:00 pm

Post by Unknown_User_274 » Thu Feb 08, 2007 3:06 am

Hello,
when running the browser sandboxed Sandboxie will not tell you if the site tried to change some setting or so,
but if some files are changed you will find them in the sandbox and you will be able to look at it without anything happening to your Browser or permanent change on your computer. My experience with sandboxie shows that its pretty safe to run websites in the sandboxed browser. Some fancy features of some used plugns might not work but for most websites it should not be required anyway.
If some website would try an exploit on your browser and would succeed its most likely it only would be able to access the sandbox instead of other permanent damage/change of anything in other parts of the filesystem.
Best Practices for safe Computing:
- run a up to date Firewall on the PC (if you use XP you can get Comodo Firewall for Free (lifetime licsence) (Personal recommendation and tested as TOP NOCH Firewall against most "to buy" Firewalls)
- run a up to date Antivirus (if you use XP you can get Comodo Antivirus for free (lifetime licsence) (Personal recommendation, its still beta but I wish some final would be as good as this one hehe )
- use a restricted user account for all activities online
- use sandboxie to secure your browser a bit more so nothing can get onto valuable data on your PC which you would not want
- use sandboxie if you want to try out some software and you are not sure what it will do to your computer (software installed in the sandbox can be easier removed without traces)


I hope I could help you out there :)
Greetings Anubclaw

Guest

Post by Guest » Thu Feb 08, 2007 4:03 am

So is there no way to tell if the website did anything? Because I'm going crazy, trying to figure out if a site infected me or not.

street011
Posts: 412
Joined: Tue Jan 16, 2007 2:08 pm

Post by street011 » Thu Feb 08, 2007 5:46 am

maybe if you tell us the site we can comment on it's behavour.

Guest

Post by Guest » Sat Feb 10, 2007 7:11 pm

Its not difficult to check.
Just start sandboxie, make sure you have cleared out all the sandboxie contents, this means that if you explore the sandboxie contents it will be empty.
Launch your browser sandboxed, you will now see that the browser files that are needed are copied into the sandboxed folder.
Go to the site in question and do what you did in the first place, look in the sandboxie folder again by exploring the contents, see if there are any new files and folders.
If for example you saw a folder suddenly appear called "Windows" with maybe System32 in it with a few files, you would know something smells funny.
Any new files that appear can then be investigated, you can simply type the name of the suspect files into google and see what results appear.

Of course just by default run something like the free Ad-Aware and/or Spybot with your updated anti-virus on your PC to see if they pick up anything.

Hope this helps

Sheldon

Guest

Post by Guest » Sat Feb 10, 2007 7:13 pm

Oh btw, another nice app that is freeware (not in the line of sandboxies functions) is called SecretMaker, you can grab a copy at www.secretmaker.com, its got some neat and innovative functions to help lock your PC down as well.

Cheers

Sheldon

Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest