sandbox part

[bri]

i have ie set to run sandboxed,when i download a file and save it to my downloads or desktop the file is there.i thought if its sandboxed it shouldnt be saved?i have the box in ais settings unchecked(auto detect safe locations and exclude)

[Lisandro]

I thought if its sandboxed it shouldnt be saved?

Sandbox is a protected environment that avoids things get out of it and harm the computer.
It does not prevent or block anything. It just does not allow it to get out of it...

[Sesame]

Sandbox is a protected environment that avoids things get out of it and harm the computer.
It does not prevent or block anything. It just does not allow it to get out of it...

However, if the file is saved on the computer, then, doesn't it mean that the file is out of sandbox, which is, I presume, the OP's point.  I think pk is the best person for explanation, though.

[Lisandro]

http://forum.avast.com/index.php?topic=56671.msg478749#msg478749

[Sesame]

http://forum.avast.com/index.php?topic=56671.msg478749#msg478749

Sorry, Tech, I cannot get it.  Could you elaborate a bit?

[Edit]Never mind, I got it.  The sentence, which I "painted" red, was rather misleading, though.

Checkbox "Automatically detect safe locations and exclude them from virtualized" is checked by default, it means all downloads (in standard way) won't be virtualized. It also means, that some settings inside browsers won't be virtualized either (bookmarks, cookies, history ...). I think we'll split it into more checkboxes or rather we'll try to add more expert settings in new builds.

Add-on updates cannot be detected automatically, because when I've updated my three addons I saw a lot of internal files were modified (prefs.js, data files, ...). For now, you 'll need to run FF outside the sandbox and perform these "radical" changes there. I think we'll include a checkbox in expert settings which would allow to stop virtualizing for the entire FF profile (unchecked by default, because I guess it might be a security risk).

Thanks pk, i have to set an exclusion for addons like C:\Program Files\Mozilla Firefox\plugins\*  ??

The right entry to exclude the entire FF profile is: %AppData%\Mozilla\Firefox\Profiles\* (don't use Browse button, just copy&paste it there)

So, Bri, that's the answer from pk.  I believe pk meant any download (in standard way) won't be virtualized.[/Edit]

[bri]

now im confused.i have that box in ais settings unchecked.i dont get it?if i double click that file on the desktop will it install(it shouldnt)?

[Sesame]

now im confused.i have that box in ais settings unchecked.i dont get it?if i double click that file on the desktop will it install(it shouldnt)?

Oops.  I guess I was confused by Tech's reply, too.  Indeed, you wrote you had the box in ais settings unchecked(auto detect safe locations and exclude).  Unfortunately, I haven't used the sandbox function after the beta phase and I don't know how it works now.  However, at that time, I couldn't save downloaded files locally.  Indeed, your case sounds odd... 

[Hermite15]

it's absolutely normal (when file get saved automatically to predefined location) , this is completely expected as long as "automatically detect safe locations and exclude them from virtualization" (found in expert settings), is checked   ... same goes for bookmarks etc...
 Now if your download procedure is set to ask every time where you want to download, doesn't matter whether the program is sandboxed of not, you just choose the location.

[Lisandro]

I thought if its sandboxed it shouldnt be saved?

Sandbox is a protected environment that avoids things get out of it and harm the computer.
It does not prevent or block anything. It just does not allow it to get out of it...

If you run a file (a downloaded file) out of the sandbox, it's not sandboxed of course and the effects won't be "blocked".

[bri]

i have that setting unchecked.why is it still saving the file to the desktop?it also installed perfectly fine?

it's absolutely normal (when file get saved automatically to predefined location) , this is completely expected as long as "automatically detect safe locations and exclude them from virtualization" (found in expert settings), is checked   ... same goes for bookmarks etc...
 Now if your download procedure is set to ask every time where you want to download, doesn't matter whether the program is sandboxed of not, you just choose the location.

[Hermite15]

i have that setting unchecked.why is it still saving the file to the desktop?

OK what I described was the behavior a while ago, I'm gonna check how it works now and report back in a minute...

[Hermite15]

OK just like I said, in Firefox (sandboxed), if downloads are set to be saved automatically to the same location, they'll go to the sandbox folder. If download location is set manually each time, you just do what you want and it's saved where you want.
 Internet Explorer doesn't allow to set an automatic download location, it just retains the last one used, so it's manual every time and will never go to the sandbox that's normal >>> this just means that it doesn't depend on a setting in Internet Explorer OK, so this can't be virtualized at the opposite of how it can be done in Firefox >>> predefined download location >>> you click save and you're not asked where >>> the predefined download folder gets sandboxed.

[bri]

thats crazy.as far as im concerned the sandbox part doesnt work.a file can be saved and installed even if the browser is sandboxed.

[Hermite15]

thats crazy.as far as im concerned the sandbox part doesnt work.a file can be saved and installed even if the browser is sandboxed.

I don't think you read my last post at all  the behavior in IE is absolutely normal.

[bri]

are you saying that if i have ie set to always run sandboxed and i download a file i must manually download it to the sandboxed folder?if it is thats crazy.when a browser is sandboxed everything comin through that browser should also be sandboxed.it shouldnt matter where the download is set to go.