<?xml version="1.0" encoding="UTF-8"?><rss
version="2.0"
xmlns:content="http://purl.org/rss/1.0/modules/content/"
xmlns:dc="http://purl.org/dc/elements/1.1/"
xmlns:atom="http://www.w3.org/2005/Atom"
xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
> <channel><title>Comments on: How To Investigate Suspicious File using Sandboxie</title> <atom:link href="http://www.raymond.cc/blog/how-to-investigate-suspicious-file-using-sandboxie/feed/" rel="self" type="application/rss+xml" /><link>http://www.raymond.cc/blog/how-to-investigate-suspicious-file-using-sandboxie/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=how-to-investigate-suspicious-file-using-sandboxie</link> <description>Daily updated news of useful advanced computer tips and tricks</description> <lastBuildDate>Thu, 24 May 2012 18:55:45 +0000</lastBuildDate> <sy:updatePeriod>hourly</sy:updatePeriod> <sy:updateFrequency>1</sy:updateFrequency> <generator>http://wordpress.org/?v=3.3.2</generator> <atom:link rel="hub" href="http://pubsubhubbub.appspot.com"/><atom:link rel="hub" href="http://superfeedr.com/hubbub"/><xhtml:meta xmlns:xhtml="http://www.w3.org/1999/xhtml" name="robots" content="noindex" /> <item><title>By: Ricardo</title><link>http://www.raymond.cc/blog/how-to-investigate-suspicious-file-using-sandboxie/#comment-496582</link> <dc:creator>Ricardo</dc:creator> <pubDate>Sun, 14 Nov 2010 11:44:55 +0000</pubDate> <guid
isPermaLink="false">http://www.raymond.cc/blog/archives/2007/11/02/how-to-investigate-suspicious-file-using-sandboxie/#comment-496582</guid> <description>Fantastic post!</description> <content:encoded><![CDATA[<p>Fantastic post!</p> ]]></content:encoded> </item> <item><title>By: eltranced</title><link>http://www.raymond.cc/blog/how-to-investigate-suspicious-file-using-sandboxie/#comment-482552</link> <dc:creator>eltranced</dc:creator> <pubDate>Mon, 19 Jul 2010 10:34:20 +0000</pubDate> <guid
isPermaLink="false">http://www.raymond.cc/blog/archives/2007/11/02/how-to-investigate-suspicious-file-using-sandboxie/#comment-482552</guid> <description>good stuff thanks</description> <content:encoded><![CDATA[<p>good stuff thanks</p> ]]></content:encoded> </item> <item><title>By: travis pippens</title><link>http://www.raymond.cc/blog/how-to-investigate-suspicious-file-using-sandboxie/#comment-469086</link> <dc:creator>travis pippens</dc:creator> <pubDate>Wed, 03 Mar 2010 01:44:50 +0000</pubDate> <guid
isPermaLink="false">http://www.raymond.cc/blog/archives/2007/11/02/how-to-investigate-suspicious-file-using-sandboxie/#comment-469086</guid> <description>Awesome! I&#039;m posting this on my website right now!</description> <content:encoded><![CDATA[<p>Awesome! I&#8217;m posting this on my website right now!</p> ]]></content:encoded> </item> <item><title>By: George Caldwell</title><link>http://www.raymond.cc/blog/how-to-investigate-suspicious-file-using-sandboxie/#comment-467861</link> <dc:creator>George Caldwell</dc:creator> <pubDate>Sat, 20 Feb 2010 04:19:01 +0000</pubDate> <guid
isPermaLink="false">http://www.raymond.cc/blog/archives/2007/11/02/how-to-investigate-suspicious-file-using-sandboxie/#comment-467861</guid> <description>I am using Sandboxie 3.42.0.0 . I have not used any older versions. I am sure the protection in the older versions are just a strong and secure. But is the version before 3.38 better because of the different menu? If so I want to try it.</description> <content:encoded><![CDATA[<p>I am using Sandboxie 3.42.0.0 . I have not used any older versions. I am sure the protection in the older versions are just a strong and secure. But is the version before 3.38 better because of the different menu? If so I want to try it.</p> ]]></content:encoded> </item> <item><title>By: janusz</title><link>http://www.raymond.cc/blog/how-to-investigate-suspicious-file-using-sandboxie/#comment-437425</link> <dc:creator>janusz</dc:creator> <pubDate>Sat, 20 Jun 2009 14:10:51 +0000</pubDate> <guid
isPermaLink="false">http://www.raymond.cc/blog/archives/2007/11/02/how-to-investigate-suspicious-file-using-sandboxie/#comment-437425</guid> <description>Just found this site...You may have already installed Sandboxie, Anna, but the file (virus) remains in Sandboxie.  Raymond &quot;left&quot; Sandboxie and view Sandboxie in the registry.  That registry hive never left Sandboxie.  He was demonstrating that the file made changes to the registry.  Of course, you can &quot;reenter&quot; Sandboxie and delete the file.  At no time was there a change to your system&#039;s registry.You can also do virus scan using your local virus scan program by simply exiting Sandboxie, going to C: drive and open the Sandboxie folder to the folder where you downloaded the file.  You can then do a virus scan of the file (which is IN Sandboxie).  If it shows a clean file then you can go back to Sandboxie and recover to the folder and it will be copied to your system.  You can also remove the sandboxed file if you like.Sandboxie is sorta like a virtual PC.  BTW, the latest Sandboxie (v3.38) is a bit different but essentially the same.  For example, there is no Function on the Menu bar BUT you can access the same content by selecting Files and Folders from the Menu.Sandboxie is cheap -- and very useful program.  Get it.HTH,
janusz</description> <content:encoded><![CDATA[<p>Just found this site&#8230;</p><p>You may have already installed Sandboxie, Anna, but the file (virus) remains in Sandboxie.  Raymond &#8220;left&#8221; Sandboxie and view Sandboxie in the registry.  That registry hive never left Sandboxie.  He was demonstrating that the file made changes to the registry.  Of course, you can &#8220;reenter&#8221; Sandboxie and delete the file.  At no time was there a change to your system&#8217;s registry.</p><p>You can also do virus scan using your local virus scan program by simply exiting Sandboxie, going to C: drive and open the Sandboxie folder to the folder where you downloaded the file.  You can then do a virus scan of the file (which is IN Sandboxie).  If it shows a clean file then you can go back to Sandboxie and recover to the folder and it will be copied to your system.  You can also remove the sandboxed file if you like.</p><p>Sandboxie is sorta like a virtual PC.  BTW, the latest Sandboxie (v3.38) is a bit different but essentially the same.  For example, there is no Function on the Menu bar BUT you can access the same content by selecting Files and Folders from the Menu.</p><p>Sandboxie is cheap &#8212; and very useful program.  Get it.</p><p>HTH,<br
/> janusz</p> ]]></content:encoded> </item> <item><title>By: Anna</title><link>http://www.raymond.cc/blog/how-to-investigate-suspicious-file-using-sandboxie/#comment-428923</link> <dc:creator>Anna</dc:creator> <pubDate>Mon, 06 Apr 2009 08:28:46 +0000</pubDate> <guid
isPermaLink="false">http://www.raymond.cc/blog/archives/2007/11/02/how-to-investigate-suspicious-file-using-sandboxie/#comment-428923</guid> <description>Im thinking of installing sandboxie. But im a bit confused. If you run a file sandboxed and it contains a virus, and copies files to system32 and to the registry, then isnt it not sandboxed as it has copied files to other areas on your computer?
Or when you delete the sandbox does it also delete the installed files in system32/registry with it?</description> <content:encoded><![CDATA[<p>Im thinking of installing sandboxie. But im a bit confused. If you run a file sandboxed and it contains a virus, and copies files to system32 and to the registry, then isnt it not sandboxed as it has copied files to other areas on your computer?<br
/> Or when you delete the sandbox does it also delete the installed files in system32/registry with it?</p> ]]></content:encoded> </item> <item><title>By: colo</title><link>http://www.raymond.cc/blog/how-to-investigate-suspicious-file-using-sandboxie/#comment-392824</link> <dc:creator>colo</dc:creator> <pubDate>Fri, 27 Jun 2008 15:33:27 +0000</pubDate> <guid
isPermaLink="false">http://www.raymond.cc/blog/archives/2007/11/02/how-to-investigate-suspicious-file-using-sandboxie/#comment-392824</guid> <description>bonjour,
j&#039;ai voulu apr</description> <content:encoded><![CDATA[<p>bonjour,<br
/> j&#8217;ai voulu apr</p> ]]></content:encoded> </item> </channel> </rss>
