[Riseing]

So sandboxie is like unbreakable when it comes to trojans/Worms and such. but an IStealer will run right through it and jack your passwords like nothing...anyway to stop this?

----Edit----
I solved it!!!
Just add

Code

%Local AppData%\Mozilla\
%AppData%\Mozilla\
\Device\Mup\

To Sandbox>Default Box>Sandbox settings> Resource Access>File Access>Blocked Access

WARNING this currently only protects FireFox Passwords!

[Xch4ng3]

I haven't come across any method of preventing iStealer leaking from Sandboxie. Your next best option is to use something like a Master Password and not to save passwords unless really necessary, so even in a case of a leakage you won't lose that much.

[-=C0d3ak=-]

So sandboxie is like unbreakable when it comes to trojans/Worms and such. but an IStealer will run right through it and jack your passwords like nothing...anyway to stop this?

i doubt that for some reason..
sandboxie wouldnt let it see anything i thought

[Riseing]

God that sucks....thats sandboxies only downfall.

i doubt that for some reason..
sandboxie wouldnt let it see anything i thought

Try it for yourself. =/



--------------------------------
Solved it!

[-=C0d3ak=-]

God that sucks....thats sandboxies only downfall.


Try it for yourself. =/



--------------------------------
Solved it!

Oh good!
I'm always going to use a VM for my testing anyways.

[Riseing]

I use VM too but sometimes I'm to lazy to turn it on lol.

[Xch4ng3]

Code

%Local AppData%\Mozilla\
%AppData%\Mozilla\
\Device\Mup\

Doesn't that just stop it accessing Mozilla's passwords?

[david56543]

you can prevent all files being opened you know so stealers cant open files...

i did this to internet too made 2 sandbox profiles 1 for internet 1 without so i run keygens in the sandbox that dont need internet and never get infected.. :D there can be restrictions for files,registry keys and internet etc

[Riseing]

Code

%Local AppData%\Mozilla\
%AppData%\Mozilla\
\Device\Mup\

Doesn't that just stop it accessing Mozilla's passwords?

Yup that works for me. I don't use IE so can't be bothered to write one lol

[Xch4ng3]

Yup that works for me. I don't use IE so can't be bothered to write one lol

Fair enough, but your forgetting Chrome, MSN passwords, NO-IP etc etc. It's a good start though, I'm sure if you expand that you can prevent it from accessing everything else.

[Riseing]

Meh I'll get off my ass and fix it in a few.

[thetoad]

noob idea... but why not run/test all things inside a cloned/spare harddrive??? just a thought as im use 2 anyway... 1 is just storage for films only. hope i maight have helped you out a bit???

[getsomepie]

noob idea... but why not run/test all things inside a cloned/spare harddrive??? just a thought as im use 2 anyway... 1 is just storage for films only. hope i maight have helped you out a bit???

Not everyone has a spare hd laying around, unfortunately.

[Riseing]

noob idea... but why not run/test all things inside a cloned/spare harddrive??? just a thought as im use 2 anyway... 1 is just storage for films only. hope i maight have helped you out a bit???

......Your spelling is noob.

[tux1]

But if you have blocked access to the internet won't that stop your passwords being compromised all together? When you say istealer runs through it do you mean it has like an local exploit for sandboxie?