+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Computing (https://hackforums.net/forumdisplay.php?fid=88)
+---- Forum: Computing Lounge (https://hackforums.net/forumdisplay.php?fid=8)
+---- Thread: [Solved]Sandboxie & IStealer Leaking[/Solved] (/showthread.php?tid=404531)
Pages: Pages
1
2
[Solved]Sandboxie & IStealer Leaking[/Solved] - Riseing - May 5, 2010
So sandboxie is like unbreakable when it comes to trojans/Worms and such. but an IStealer will run right through it and jack your passwords like nothing...anyway to stop this?
----Edit----
I solved it!!!
Just add
Code
%Local AppData%\Mozilla\
%AppData%\Mozilla\
\Device\Mup\WARNING this currently only protects FireFox Passwords!
* - Xch4ng3 - May 5, 2010
I haven't come across any method of preventing iStealer leaking from Sandboxie. Your next best option is to use something like a Master Password and not to save passwords unless really necessary, so even in a case of a leakage you won't lose that much.
* - -=C0d3ak=- - May 5, 2010
(May 5, 2010 07:05 PM)Riseing Wrote: So sandboxie is like unbreakable when it comes to trojans/Worms and such. but an IStealer will run right through it and jack your passwords like nothing...anyway to stop this?
i doubt that for some reason..
sandboxie wouldnt let it see anything i thought
* - Riseing - May 5, 2010
God that sucks....thats sandboxies only downfall.
(May 5, 2010 07:08 PM)-=C0d3ak=- Wrote: i doubt that for some reason..
sandboxie wouldnt let it see anything i thought
Try it for yourself. =/
--------------------------------
Solved it!
* - -=C0d3ak=- - May 5, 2010
(May 5, 2010 07:09 PM)Riseing Wrote: God that sucks....thats sandboxies only downfall.
Try it for yourself. =/
--------------------------------
Solved it!
Oh good!
I'm always going to use a VM for my testing anyways.
* - Riseing - May 5, 2010
I use VM too but sometimes I'm to lazy to turn it on lol.
* - Xch4ng3 - May 6, 2010
Code
%Local AppData%\Mozilla\
%AppData%\Mozilla\
\Device\Mup\Doesn't that just stop it accessing Mozilla's passwords?
* - david56543 - May 6, 2010
you can prevent all files being opened you know so stealers cant open files...
i did this to internet too made 2 sandbox profiles 1 for internet 1 without so i run keygens in the sandbox that dont need internet and never get infected.. :D there can be restrictions for files,registry keys and internet etc
* - Riseing - May 6, 2010
(May 6, 2010 01:53 AM)Xch4ng3 Wrote:Code%Local AppData%\Mozilla\
%AppData%\Mozilla\
\Device\Mup\
Doesn't that just stop it accessing Mozilla's passwords?
Yup that works for me. I don't use IE so can't be bothered to write one lol
* - Xch4ng3 - May 6, 2010
(May 6, 2010 04:01 AM)Riseing Wrote: Yup that works for me. I don't use IE so can't be bothered to write one lol
Fair enough, but your forgetting Chrome, MSN passwords, NO-IP etc etc. It's a good start though, I'm sure if you expand that you can prevent it from accessing everything else.
* - Riseing - May 6, 2010
Meh I'll get off my ass and fix it in a few.
* - thetoad - May 23, 2010
noob idea... but why not run/test all things inside a cloned/spare harddrive??? just a thought as im use 2 anyway... 1 is just storage for films only. hope i maight have helped you out a bit???
* - getsomepie - May 23, 2010
(May 23, 2010 09:49 AM)thetoad Wrote: noob idea... but why not run/test all things inside a cloned/spare harddrive??? just a thought as im use 2 anyway... 1 is just storage for films only. hope i maight have helped you out a bit???Not everyone has a spare hd laying around, unfortunately.
* - Riseing - May 23, 2010
(May 23, 2010 09:49 AM)thetoad Wrote: noob idea... but why not run/test all things inside a cloned/spare harddrive??? just a thought as im use 2 anyway... 1 is just storage for films only. hope i maight have helped you out a bit???
......Your spelling is noob.
* - tux1 - May 23, 2010
But if you have blocked access to the internet won't that stop your passwords being compromised all together? When you say istealer runs through it do you mean it has like an local exploit for sandboxie?