Sandboxie alterntives like BufferZone Pro..etc

Hi, My SBIE license will be expiring soon and still no funds to spare here..drats. I saw this BufferZonePro and I just wanted to some ideas from you guys about it. If anybody here uses it or have experienced using it. My choice was to be GesWall free but the development seems to have fallen out. Have not heard of some good insights from the developers lately. The last time I visited the forum there, there was this guy who called himself "admin" or something like that bullying new users making the forum jerky. Any news about GesWall? Is GesWall dead? PrevxSafeonline facebook edition seems good but does not have support fopr the latest FF8 and have seem to be lagging behind the new WSA of Webroot. Still no freeone in sight at Webroot... Really looking for a freeware alternative but seem to have nothing in sight. The SBIE free is limited to only 1 sandbox. "Comodo sandbox" sandboxes also the plugin for pdf printing so I can't print in the sandboxed-browser. Any ideas guys..? Thank you :)

Good question. I recall looking into BufferZone Pro some time ago during a promo.

Ah.. found the link I had bookmarked to a thread at WildersSecurity forums: HERE

The 2nd post says it's a good product, read through and see. (there's about 70 posts in the thread.) ==> that's the good and bad news about Wilders forums. Lots of extremely knowledgeable people hang out there so there's often a FLOOD of information to read through.

But if you want really in-depth info, that's the place to go. Also, I remember seeing a lot of posts about GesWall there. They would know the score on its development or lack thereof.

Yeah, sad news about Webroot acquiring Prevx: they still haven't even provided an upgrade path for Prevx 3 license holders. :upset:

Thanks Jelson.

Honestly I have never tried any sandbox kind of application for more than few minutes, so I am unable to give an opinion on this.

Quote:

---

Originally Posted by Avinash

Thanks Jelson.

Honestly I have never tried any sandbox kind of application for more than few minutes, so I am unable to give an opinion on this.

---

Same here. Sujay is the best in security stuff.

@Damien If BufferZone doesn't work as you expected, you could try Returnil, but its a bit heavy on resources and is more of a Virtual system than a Sandbox.

I would recommend using Buffer Zone Pro. IT is now a freeware so no worries. As i said i personally use this and is very good. IF wanted u can also set your usb and cd drives to sandboxed runs so the malware runs in the sandbox. So just try it you will like it. I prefer it to Sandboxie. It also auto sandboxes certain suspicious programs automatically. IT also sandboxes any Internet based application automatically. So just give it a spin.

Quote:

---

Originally Posted by avibky

I would recommend using Buffer Zone Pro. IT is now a freeware so no worries. As i said i personally use this and is very good. IF wanted u can also set your usb and cd drives to sandboxed runs so the malware runs in the sandbox. So just try it you will like it. I prefer it to Sandboxie. It also auto sandboxes certain suspicious programs automatically. IT also sandboxes any Internet based application automatically. So just give it a spin.

---

I really appreciate your input on this. Very intrigued about its abiliy to sandbox USB flash drives. Very handy!! :first:

I'm wondering if if BusterSandboxAnalyzer will work with BufferZonePro. Mainly because I mainly use Sandboxie to try out apps and to suss out what registry changes an app makes when it installs. BSA is the only app I know that makes it fairly easy to see registry changes.

I dont think it works with bufferzone. But bufferzone's way automatically sandboxing any app including a word file to autorun.inf, thus keeping the computer safe. It also automatically sandboxes a svchost process for privacy. So give it a shot u will like it.

---------- Post added at 10:23 PM ---------- Previous post was at 10:22 PM ----------

Use anibus or submit a file to your av vendor when i doubt.

Hi guys, Thanks for the relies here.

The links are good and am still checking it out. Have installed BZPro alongside Avira free and it seems okay. I seem to like it though I see somewhat slow browsing. Yeah I saw how it virtualizes svchost.exe and the usb thing. Quite nice.

When I installed Comodo ver5.8 free I got into BSOD and then after a while boot-up seems to take forever. When run without Comodo or OA free it seems to function okay.

I see that it has it's own firewall..that might be the case or something else...Anyone know how to do a custom install of BZ without the firewall? I want to use it alongside a full-blown firewall like Comodo or OA free.

How about Trusteer Rapport? I hear some good news about it but don't know if I can use like a sandbox...

and oh this is on a Win7 x32 pc.

@Ashwin,

Hi, tried Returnil last year on this same pc and yeah it made this pc crawl(old pc this is). But I did have a good feel of it.

Thanks guys :)

A question.

What happens after Sandboxie license expires:

A: no further updates
B: reverts to free version

Quote:

---

Originally Posted by Grr

A question.

What happens after Sandboxie license expires:

A: no further updates
B: reverts to free version

---

I think the 1 year license would revert to a free version, but you can still update it. Not sure though.

Ok damein, through the settings of BufferZone disable its automatic firewall and disable it from startup. Reboot. Now install CIS. After that add bufferzone to trusted files of Defense+. Switch on BufferZone and in its exclusions put Comodo IS. Thats it and re-enable its autostartup. I too use the same combo. I use CIS Pro and BufferZone Pro.

---------- Post added at 05:24 PM ---------- Previous post was at 05:22 PM ----------

Damien, for your question about BufferZones firewall let me clarify that the firewall component auto sandboxes unknown softwares. I personally use BuffferZone only when needed, as even comodo auto sandboxes unknown programs so it is a overkill.

Hi,

Appreciate the help here thanks.

I did just that:

a. installed BufferZone Pro v3.42. Rebooted.
- But I cannot turn-off the firewall. I cannot see any button or some setting that I can use to turn the firewall off. See image.
- The config settings also does not say anything there.
- I just turned-off protection instead and the start-up program.

b. Installed CIS free v5.8
- Placed Program Files\Bufferzone and Program Data\Bufferzone in D+ as Trusted.

c. Rebooted.

There was no BSOD but the boot was long. It took almost 20,25minutes to forever from "Please Wait-Welcome-Preparing your desktop" and then all I see is a black screen with the arrow pointer. Restarted again. The same thing happened. I had to restore from a system image I have because it would not continue to boot.

I tried to install in an XP machine with AvastFree and just the windows firewall. BZ installed fine/no boot problems. Used an XP system image and installed a trial version of Avast IS. BZ installed fine and no boot problems. Used the XP system image again and installed Avira Premium. BZ installed fine/no boot problems. Installed Comodo. Again boot problems.

Makes me think that the firewall component or the HIPS is clashing or something...

http://www.freeimagehosting.net/t/22418.jpg

Ok Damein, do the following.
1. Delte all the rules in the firewall part of bufferzone.
2. Go to configuration and inside settings tab go down to Advanced Rules. Add Comodo exe and its folder as an exception.
3. Go the Misc section in the configuration section and for Installers set both to prompt. ( ie prompt for signed as well as unsigned installer).
4. Disable bufferzone from windows services or use some software like tuneup utilities to do so.
Now if u are reinstalling pls install CIS first and then bufferzone. Add bufferzone is CIS exceptions and as i said in pt2 add comodo to bufferzone exception.

Now i use bufferzone only for usb sandboxing as comodos firewall autosandboxes suspicious files auto. Anyway if u have kis it works well with it without any testing. Again this combo was tested by me. I think that u encountered the problem as u installed Cis after installing bufferzone so remember to tdo the vice versa.
Always create a restore point before installing either of them. This time it should work. Cuurently i removed bufferzone to try sandboxie but gonna revert back to bufferzone. Bufferzone is by far better.

Thnx damein.

I suspect your Sandboxie license scheme is Personal license with one-year free updates, damien? Then you should be able to use Sandboxie just like usual even if it reaches its expiry date but no more further program updates for you till you renew your license. So, no need to install Bufferzone or other similar software.

@avibky, Thanks for reply. When I started to install BZ it was with Avira and CIS existing already but I got into a BSOD and then it happened.. (..it's printed in the previous post). I was also trying to place a folder as exclusion in BZ but it cannot do that. It only identifies a file type as when I excluded Comodo and Avira processes previously. Okay I'll try again. I have a system image backup so whenever something goes awry I just use recover an image. Will get back here.

@corker, I used a system image with the SBIE program version 3.60 yesterday and it auto-updated to version 3.62. It asked to be activated but since mine expired the other day it won't accept the license anymore plus the settings I have cannot be used again. I have 6 sandboxes(each for a specific agenda/browser/app trial etc. I was left with only just one which was a default. It would not allow simultaneous usage of sandboxes but just 1. The pop-up of SBIE says that I cannot activate anymore due to the expiration date(1 year). And the program went into an "Unregistered version" with limited abilities(as mentioned cannot use 2 or more and cannot install a program in the sandbox for trial etc).

There was also something like a pop-up that said ..since this is an unregistered version you cannot do so and so..etc something and the program will time-out or stop or something...(cannot remember and forgot to take a snapshot). So I uninstalled/ re-installed as free user with configuration not saved. If I save the config when I uninstall, the set-up will be as when I was using an active license but the program will stop (--the pop-up something that I forgot to take a snapshot/can't remember). I can't seem to fix my post. Everytime I use the "Quick Reply" the format goes "continuous" making it difficult to read. How can this be fixed. I click edit and fix it but when I "Save Changes" it still is that way....

Then you have to downgrade by reinstalling Sandboxie 3.60, damien. You had better still have the installler for that version with you. After that, go to Help tab and set the Check for Updates submenu to Never, so your last version of licensed Sandboxie will not be autoupdated in the future.

Quote:

---

Originally Posted by corker

Then you have to downgrade by reinstalling Sandboxie 3.60, damien. You had better still have the installler for that version with you. After that, go to Help tab and set the Check for Updates submenu to Never, so your last version of licensed Sandboxie will not be autoupdated in the future.

---

-- Hmmm...I'll give it a go when I finish the BZ set-up. I'd have to load another image. Thanks.

I can't seem to have it work for BZPro(with Avira Premium (--thanks to the post here, formerly using Avira Personal) and Comodo). I had the chance to have a pleasant set-up with a trial Avast IS ad BZ Pro. It's running now but with the Avira/Comodo set-up...no. And I want to use that combination. I do not have Avast IS license and I am keen on using Avira Premium.

On the SBIE, I reloaded an image and downgraded to ver3.60. It did not allow multiple usage of sandboxes and Program Start>Forced Folders because mine is already an "Unregistered version". So it's the free version now whatever version I load.

IMHO, Sandboxie is truly one of a kind.
Damien I feel you should definitely buy the lifetime license of Sandboxie this Xmas :D

Quote:

---

Originally Posted by damien

On the SBIE, I reloaded an image and downgraded to ver3.60. It did not allow multiple usage of sandboxes and Program Start>Forced Folders because mine is already an "Unregistered version". So it's the free version now whatever version I load.

---

caz free is just 1 instance, and no forced sandbox...

Next time try to perform a fresh Sandboxie 3.60 installation and not rollback, damien. Perhaps that will make the difference.

Quote:

---

Originally Posted by corker
Next time try to perform a fresh Sandboxie 3.60 installation and not rollback, damien. Perhaps that will make the difference

---

I am sorry but I did that also. It went back to the freeware version. I used an image where the SBIE installation was ver5.8 disabled auto-update. Continued to use the activated ver5.8 as normal. When it detected my installation was already expired it asked that the app need be re-activated. When you don't activate it and ignore it will function yes but soon(2 days) it will go back to the freeware version. I did that 3x all the same observation.

--


On the Bufferzone install, I can't seem to make it work with a full blown firewall in the likes of OA free/Comodo.


I have successfully installed it with AvastFree and Avira Premium(no firewall). Also with trial versions of Avast IS and Avira IS. Seems the firewall component is conflicting with the full blown stand-alone-firewall. All with the proper exclusions. All processes of Comodo/OA free on BZ and vice versa. Same observation. Seems to go on forever in "Preparing your desktop" and then "black desktop"...


Have not tried to install with Outpost Pro yet. But I have an inkling it will be the same.


I ended up using PrevxSafeonline(for Chrome/Opera) + SBIE free(for Firefox) + Avira Premium on this Windows 7 x32 pc.


Have installed it in an XP machine with AvastFree. Seems to be doing okay but the firewall component is very limited and you cannot disable it to have a full blown stand-alone-firewall. It there'd be a possibility of disabling the firewall then BZ would be a great app indeed. The functions are quite good. Very promising. Too bad it's underdeveloped.


Also observed that in Chrome/Iron the BZ red border is not visible. But in the GUI it's listed as protected. You also cannot place a whole folder as excluded/trusted in BZ. You will have to identify and place each process manually. The red-border is visible in Firefox and Opera.


So in the meantime that I have not a license for SBIE the set-up is PrevxSOL facebook edition(also under-developed now) + SBIE free + Avira Premium or Avira Personal or AvastFree.


Have not tried GesWall again though. I have retained the AvastFree + BZ and still observing. Had Process Hacker v2 to augment process termination.

Quote:

---

Originally Posted by damien

I am sorry but I did that also. It went back to the freeware version. I used an image where the SBIE installation was ver5.8 disabled auto-update. Continued to use the activated ver5.8 as normal. When it detected my installation was already expired it asked that the app need be re-activated. When you don't activate it and ignore it will function yes but soon(2 days) it will go back to the freeware version. I did that 3x all the same observation.

---

I am afraid indeed that is the deal, damien. Sandboxie with one-year license works like a rent. After it expires and you don't renew, then you won't get any premium features. You are entiled to free updates just like other free users, however.

Quote:

---

Originally Posted by corker

I am afraid indeed that is the deal, damien. Sandboxie with one-year license works like a rent. After it expires and you don't renew, then you won't get any premium features. You are entiled to free updates just like other free users, however.

---

I though it would still be a PRO- BUT no updates

Hmm... somebody remembered me here..;)

Straight to the topic..:)
I am facing the same problem but I have no problem with SandboxIE free as I don't prefer to test software within SandboxIE and I use only one "defaultbox" for occasional browsing.
Trusteer Rapport/Safe Online are not replacement of Sandboxie.
Comodo Sandbox might be considered as a replacement but its not that flexible.
BufferZone is good in features but may not fair well in some systems, atleast not in my case. But I am getting good remarks for v4. You could try it once it will release publicly.
For software testing you might give Toolwiz Time Freeze a spin.
Products | Toolwiz Software
It is a new product yet very capable. Its sort of Returnil kind of product but unlike that you can drop all changes without a reboot. The developer is kind enough to accept suggestions and offers quick bug-fixes.

@corker,

Yeah. Thanks for the suggestions.

@sujay,

Your so busy huh...been waiting for a reply really. Now with the set-up I posted previously.
Avira Premium + PrevxSOL + SBIEfree for Firefox + Comodo ver5.8. Avira Premium ver10 at that because I did get the "Bad Image" problem which is as of now no solution.

I'll stay with this set-up for awhile. By the way I remembered I tested WSA Beta. Is the license that they gave still okay by the way...? Might be expired now that they released the final version. But can I use it instead of PrevxSOL?

Saw this one at MaximumPc. Webroot seems to be getting better.
xxxx://www.maximumpc.com/print/article/features/choose_your_defender

I hear that Trusteer Rapport has been bypassed.! xxxx://www.wilderssecurity.com/showthread.php?p=1986369

and the Comodo D+ affected by zeroaccess rootkit

xxxx://www.wilderssecurity.com/showthread.php?p=1985441


Cheers guys :)

@damien: Yeh busy these days.
If you are happy with your setup that's fine :). And no security product is 100% safe. All you need is to believe in some and keep your common sense.