handling downloads with sandboxie

[Unknown_User_925]

Hi, I stumbled onto sandboxie, the other day and i think its a fantastic concept. I now run my firefox sandboxed, gaim, and limewire.
i was excited to start using it with limewire because of the risk of downloading something malicous accidentally. then i realized i can't move any of the files i downloaded from the sandbox to my harddrive. which i know is exactly what sandboxie was made to do. so i know everything is working as it should, however, i guess this means its kinda useless to use sandboxie with limewire, unless there is another way to move the data i download to my real hard drive.

i know i am able to download something in firefox while sandboxed, and install it withini the sandbox, but say if i wanted to download a driver and install taht for real, i wouldn't be able to do it while firefox is sandboxed is this correct?

my original plan was to configure limewire and firefox to download to the same folder within the sandbox and for me to make a batch file that scans the contents of the folder deletes all malicious detections and then move certain file to specific folders (*.mp3 -> /my music/)

but sandboxie wont allow you to move something from the sandbox to the computer, is there a way to do this?

[Paul_K]

http://www.sandboxie.com/index.php?SandboxieIni

See the Settings page - Link above

You can specify a RecoverFolder from within Sandboxie's Main Window (double-click the tray icon, then Configuration > Sandbox Settings > Set-up Automatic Clean-up Options)

Either select one of the folders listed to the right of the box, such as My Documents or Desktop, or type your own folder name in the box:
Example: C:\My Downloads
Use a folder name of your choice.
Don't include any quote (") characters in the line you type.
When you save a file from within a sandboxed program, save it to the folder you specified as a RecoverFolder.

This sounds like what you want. The files you save will still be in the sandbox, in the sandboxed 'My Downloads' folder in this example, and you can scan them with a program (running outside of the sandbox) before Recovering them to your unsandboxed hard drive folder. If you have an unsandboxed 'My Downloads' folder, during a Recover operation you would just Recover them "to the same folder" and they would be moved out of the sandbox.

OpenFilePath= is another option, but you have to 'Edit Configuration' to add it. Basically, it allows files you save to go immediately to the unsandboxed folder you specify. A Recover operation isn't needed, but be advised it's like punching a hole in the sandbox.
You don't want this, since the files you save would go to the unsandboxed folder immediately, and would not be scanned while still in the sandbox.

[MitchE323]

hello nothreat33 -

i know i am able to download something in firefox while sandboxed, and install it withini the sandbox, but say if i wanted to download a driver and install taht for real, i wouldn't be able to do it while firefox is sandboxed is this correct?

The only way that I know of to do this part is to actually take them from the sandbox, right click the icon in taskbar and "explore contents" find the driver and copy to your desktop.

I don't think the auto recovery would start until you closed firefox and
OpenFilePath also but as Paul says, it doesn't sound like you want that in this case.

mitch

[MitchE323]

one other thing that might work but I've never tried it - others can help out here;

If the files you want to save are always the same, let's say mp3's -

openfilepath=YourFolder/only.mp3
but the "only.mp3" would have to be a setting.

maybe

[Guest]

The only way that I know of to do this part is to actually take them from the sandbox, right click the icon in taskbar and "explore contents" find the driver and copy to your desktop.

I tryed that i get an access denied error.

[MitchE323]

I see what is happening, since you are new to Sandboxie, and you got the access denied rejection- you thought that's how Sandboxie worked. No, Sandboxie is not what is stopping you from accessing the files, something else is. Sandboxie creates the sandbox and places the files there, but doesn't lock them. You should be able to copy and paste out of the sandbox.

What is your OS?

mitch

[SnDPhoenix]

Hmm, theres 2 options you could try:

1.
Goto your ini file and add:
(XP)
RecoverFolder=C:\Documents and Settings\(your windows name)\Shared

(Vista)
RecoverFolder=C:\Users\(your windows name)\Shared

or the more riskier option:

2.
(XP)
OpenFilePath=C:\Documents and Settings\(your windows name)\Shared

(Vista)
OpenFilePath=C:\Users\(your windows name)\Shared

Now heres a little breakdown of how those options will work. If you use option 1, then you can run limewire, download all the stuff you want, and then when you close limewire, you can go ahead and delete the contents of the sandbox, and before everything is delete, it'll ask whether you want to recover and files and/or folders that are found in your Shared folder, after you recover the files you would like, then Sandboxie will proceed to delete the contents of the sandbox (it sounds more confusing then it really is). If you use option 2, then files that you download with limewire will be saved on-the-fly to your real Shared folder outside of Sandboxie, but as Paul stated, its very risky since you are basically punching a hole in the sandbox, and so if you do happen to download something malicious with limewire, then it will be saved to your real Shared folder outside sandboxie, so in other words, you'd be infected. now about the access denied error, thats not a sandboxie error, it has to do with something on your pc basically "locking" the files that are in the sandbox, although copy and pasting should work fine even if the files are locked, you just cant move the files if they are locked.

[Unknown_User_925]

Does sandboxie need to be run as administrator? how can i tell what privledges the sandboxie process is running under?

[MitchE323]

I've only run it as administrator but I do not think that has to be. SND can help out here.

Your situation is bringing a question up to me, and I'll just ask SND here and maybe it fits with you too. As I understand it Nothreat knows he will be downloading a bunch of stuff for his game, some of that stuff he knows is real high risk, but other stuff he wants to keep. He also wants to get to those good files without shutting the browser down. We can all do that but he is access denied for some other reason.

Does it make any sense at all to make the recycle bin an openfilepath? Can bad files infect your pc from the recycle bin? Not just in Nothreats situation, but as a general question.
mitch