i have ie set to run sandboxed,when i download a file and save it to my downloads or desktop the file is there.i thought if its sandboxed it shouldnt be saved?i have the box in ais settings unchecked(auto detect safe locations and exclude)
Sandbox is a protected environment that avoids things get out of it and harm the computer.
It does not prevent or block anything. It just does not allow it to get out of it…
However, if the file is saved on the computer, then, doesn’t it mean that the file is out of sandbox, which is, I presume, the OP’s point. I think pk is the best person for explanation, though.
Sorry, Tech, I cannot get it. Could you elaborate a bit?
[Edit]Never mind, I got it. The sentence, which I “painted” red, was rather misleading, though.
So, Bri, that’s the answer from pk. I believe pk meant any download (in standard way) won’t be virtualized.[/Edit]
now im confused.i have that box in ais settings unchecked.i dont get it?if i double click that file on the desktop will it install(it shouldnt)?
Oops. I guess I was confused by Tech’s reply, too. Indeed, you wrote you had the box in ais settings unchecked(auto detect safe locations and exclude). Unfortunately, I haven’t used the sandbox function after the beta phase and I don’t know how it works now. However, at that time, I couldn’t save downloaded files locally. Indeed, your case sounds odd… ???
it’s absolutely normal (when file get saved automatically to predefined location) , this is completely expected as long as “automatically detect safe locations and exclude them from virtualization” (found in expert settings), is checked ;D … same goes for bookmarks etc…
Now if your download procedure is set to ask every time where you want to download, doesn’t matter whether the program is sandboxed of not, you just choose the location.
If you run a file (a downloaded file) out of the sandbox, it’s not sandboxed of course and the effects won’t be “blocked”.
i have that setting unchecked.why is it still saving the file to the desktop?it also installed perfectly fine?
OK what I described was the behavior a while ago, I’m gonna check how it works now and report back in a minute…
OK just like I said, in Firefox (sandboxed), if downloads are set to be saved automatically to the same location, they’ll go to the sandbox folder. If download location is set manually each time, you just do what you want and it’s saved where you want.
Internet Explorer doesn’t allow to set an automatic download location, it just retains the last one used, so it’s manual every time and will never go to the sandbox that’s normal >>> this just means that it doesn’t depend on a setting in Internet Explorer OK, so this can’t be virtualized at the opposite of how it can be done in Firefox >>> predefined download location >>> you click save and you’re not asked where >>> the predefined download folder gets sandboxed.
thats crazy.as far as im concerned the sandbox part doesnt work.a file can be saved and installed even if the browser is sandboxed.
I don’t think you read my last post at all :
the behavior in IE is absolutely normal.
are you saying that if i have ie set to always run sandboxed and i download a file i must manually download it to the sandboxed folder?if it is thats crazy.when a browser is sandboxed everything comin through that browser should also be sandboxed.it shouldnt matter where the download is set to go.
NO >>> what I’m saying is that the automatic sandboxing of downloaded files in Internet Explorer cannot work because there’s no automatically pre-defined location for the downloads set in Internet Explorer settings. While there is in Firefox.
anything downloaded through ie is not auto sandboxed right??
right, again because with IE downloads locations are chosen manually each time (for security reasons, which is funny for IE). How do you want to sandbox a download when you choose the download location yourself?
thats not good,you keep saying because of ie but sandboxie has no trouble dealing with ie and downloads.
Thanks for this topic. There’s really a bug about downloads detection in the latest version; during rewriting hooking functions I’ve forgot for one check. So, in this avast build all downloaded files (saved by standard legitimate way) are not saved in the sandbox (which is done by default). All files created/downloaded with different ways are always virtualized, this remains.
Just to be clear: if the mentioned checkbox is checked, it does the following:
- changing your browser’s settings becomes permanent
- bookmarks/cookies/history/… are saved on disk
- standard downloads are detected and the files are saved on disk outside the sandbox (this works for all browsers, even if you choose different location - so IE downloaded are detected as well; in fact, this also works for other applications than browsers, run e.g. Microsoft Paint and images will be stored outside sandbox as well)