Unsolved
This post is more than 5 years old
37 Posts
0
1679
December 27th, 2010 14:00
Just wondering
Because no one program can catch everything I often run online scans and switch between eset's, f-secure, etc.
I just noticed something odd while running a scan from eset and wondering if anyone else noticed the same.
On this scan I was running sandboxed and watching the files being scanned on the screen when I noticed it got to sandboxies default box it started to rescan everthing all over again.
I know now not to be sandboxed while running a scan of spend a day scanning. I was just wondering if any one else seen this.
0 events found
No Events found!
joe53
2 Intern
•
5.8K Posts
•
17.3K Points
0
December 27th, 2010 16:00
An interesting question!
Surfing in a sandbox is a safe practice, but I'm not sure it is advisable when running online security scans from reputable websites such as eset. You are highly unlikely to pick up any malware from such sites.
It has been a while since I ran eset's online AV scanner, so I just tried to run a scan sandboxed using Sandboxie. As always, I first disabled my real-time AV (NOD32 v4.x) to prevent any conflict, and configured the online scanner to NOT remove anything it finds, but to alert me only. (Anything it finds is likely a false positive. Even if not, my system is working well, so I have the luxury of investigating anything found before deleting it).
After over an hour, and the scan only 25% completed, I abandoned it. (The complete eset online scan normally takes less than an hour un-sandboxed). I do note that at this time the online scanner was examining C:\Sandbox\ ...
njmac
37 Posts
0
December 27th, 2010 17:00
Joe,... LOL, I have always used my browser and not the sandboxed browser for these scans. But this time I clicked on the sandboxed browser with out thinking and I also did the same on clicking on to not remove anything. I was takeing a break and sat and watched the screen when I noticed it was scanning files it has already scanned.
On reading your reply you said that it seem to be stuck on " C:\ sandbox\... the rest is the default box.
In otherwords the way I see it is it was scanning you computer until it got to the sandboxes default box and then scanned your sandboxes virtual computer along with your computer. In otherwords everything twice.
To me the sandbox is doing what it should be doing and I take that as a very big plus as it's working.