 |
 | Countdown timer feature |  |
|
evild3ad
|
|
I'm looking for a countdown timer feature which is stopping all processes in the sandbox after the adjusted time. Is there a feauture or a possibility to do that? Thank you.
|
|||||||||||
|
|||||||||||||
 |
| |
|
Buster
|
|
Itīs very simple: just code a program that after the amount of time you specify calls start.exe with the "/terminate".
From http://www.sandboxie.com/index.php?StartCommandLine Stop Programs Terminate all programs running in a particular sandbox. Note that the request is transmitted to the Sandboxie service SbieSvc, which actually carries out the termination. "C:\Program Files\Sandboxie\Start.exe" /terminate "C:\Program Files\Sandboxie\Start.exe" /box:TestBox /terminate "C:\Program Files\Sandboxie\Start.exe" /terminate_all If the parameter /box:SandboxName is omitted, programs running in the default sandbox, DefaultBox, will be stopped. The form /terminate_all terminates all programs in all sandboxes. |
|||||||||||
|
|||||||||||||
|
| |
|
evild3ad
|
|
Sorry, I'm not a developer...I need more help. 
My idea: I edited the windows context menu...: HKEY_CLASSES_ROOT\*\shell\ I added a key with the name "sandbox countdown", a string named "(Standard)" with the value "Sandboxie: Lifetime 2min." and a string named "Icon" with the value "C:\Program Files\Sandboxie\Start.exe" I also added the subkey with the name "command" = "C:\Program Files\Sandboxie\<program>" May you write this program for me? Thanks in advance! I'm interested in this feature for better analyzing ransomware (WindowsScreenLocker). |
|||||||||||||
|
|||||||||||||||
|
| |
|
Buster
|
|
I coded something like that already. Itīs named Buster Sandbox Analyzer: http://sandboxie.com/phpbb/viewtopic.php?t=6557 |
|||||||||||||||
|
|||||||||||||||||
|
| |
|
evild3ad
|
|
I love Buster Sandbox Analyzer...but where do I've there the possibility to stop all running processes in Sandboxie? ...to finish the analysis with BSA I have to stop all running processes in Sandboxie first.
|
|||||||||||
|
Last edited by evild3ad on Fri Jul 27, 2012 6:21 pm; edited 1 time in total
|
|||||||||||||
|
| |
|
Buster
|
|
You have two posibilities: 1) Run analysis in automatic mode. In automatic mode you must set a time limit for the analysis 2) Run analysis in manual mode. At Options > Manual Analysis Options enable "Set a Time Limit For Analysis". |
|||||||||||||
|
|||||||||||||||
|
| |
|
evild3ad
|
|
Ok, I have it...it works!
BSA.EXE -s 120 -f C:\Malware (Sandboxie Control must be opened.) First time I used BSA from command line! |
|||||||||||
|
|||||||||||||
|
| |
|
Buster
|
|
It does not matter if Sandboxie Control is opened or closed.
|
|||||||||||
|
|||||||||||||
|
| |
|
evild3ad
|
|
Thank you very much for your help!!!
|
|||||||||||
|
|||||||||||||
|
| |
|
Buster
|
|
Youīre welcome.
|
|||||||||||
|
|||||||||||||
|
 | Countdown timer feature | |
|
||
Use the RSS feed to watch this topic for replies |
|
|