Antivirus for scrapebox?
- Thread starter tat1973
- Start date
cyberzilla
Elite Member
- Nov 15, 2009
- 2,467
- 3,599
ALWAYS filter your list with SB Malware and Phishing Filter Add-on after harvesting...I'm also using AVG free edition so far no virus problem. You just have to regularly update your AV no matter what AV you use..
CyberknightTully
Junior Member
- Feb 19, 2010
- 136
- 151
I had to get rid of AVG because it was seeing SB as a virus or trojan and messing me up a lot. Don't know if this is a common event or not.
partymarty4870
Elite Member
- Jul 7, 2010
- 2,032
- 1,697
I use kaspersky and it seems to work well with SB - it's always catching things.
chinmokuyuuki
Junior Member
- Feb 10, 2010
- 152
- 49
Indeed always run the Malware and Phishing filter on your list. Run an up to date AV or run in a Virtual Box.
Abstroose
Elite Member
- Nov 20, 2008
- 2,181
- 3,634
Couldn't agree more. I filter every single list with the SB plugin, and use Avast for everything else.
blackhit
Elite Member
- Jan 28, 2008
- 2,352
- 4,357
In addition to the replies above.
This is a simple method that doesn't rely on up-to-date blacklists or virus databases when running SB from your home PC.
1.) Install VMWare or Virtualbox. Install your OS in the virtual machine.
2.) Install SB. Activate SB or request license transfer.
3.) Make a copy of all the virtual machine files. This way you have a clean virus/trojan free install with SB already activated.
4.) Whenever your virtual machine acts strange OR maybe once or twice a week just delete your virtual machine, copy the clean virtual machine to your working folder and continue blasting away.
Don't forget to copy any textfiles or projectfiles from SB before you delete the VM.
This is a simple method that doesn't rely on up-to-date blacklists or virus databases when running SB from your home PC.
1.) Install VMWare or Virtualbox. Install your OS in the virtual machine.
2.) Install SB. Activate SB or request license transfer.
3.) Make a copy of all the virtual machine files. This way you have a clean virus/trojan free install with SB already activated.
4.) Whenever your virtual machine acts strange OR maybe once or twice a week just delete your virtual machine, copy the clean virtual machine to your working folder and continue blasting away.
Don't forget to copy any textfiles or projectfiles from SB before you delete the VM.
antsaoo
Supreme Member
- Oct 1, 2008
- 1,288
- 650
I don't like comodo at all when i used it too many years ago.
I use AVG myself. Only thing i disabled the link checker, Doesn't give much problem on my main computer but ate all CPU power from 2nd while scrapebox didn't need that much , im not sure how it checks the links for malwares. Haven't had problems though
Tried Microsoft security essentials for VPS but it just fucked up the speed to something which just wasn't worth it at all.
So all in all i suggest too that you run the malware checker for vps atleast. Infected site might crash your SB if the Data execution prevention happends i believe :O
thevil
Junior Member
- Aug 17, 2010
- 190
- 190
Heres a surefire way of never infecting your main computer. Do not surf the internet.
Now we got that out of the way, I can assure you that no, I mean NO virus scanner/security feature/sandbox/virtual OS can contain malware 100%. Yes I have seen POCs (proof of concept) that have broken out of contained virtualizations (yes, these are rare and hardly ever in the wild unless they are ready to be released from a blackhatter).
People assume that since each VMs looks like separate hardware, it provides the same level of isolation as true physical hardware. Appearances are deceiving. Do NOT be fooled. Guest can pass to Host given the sophistication of malware.
So as a rule of thumb, NEVER engage in hazardous activity even in a virtualized environment! You should ONLY be doing so IF you are on hardware that you don't care about and the O/S has no sensitive data.
POC of sandboxie bypassed recently by adding user accounts
Examples of older fixed vulnerabilities.
'Restore' programs such as Comodos Time machine, DeepFreeze, Shadow Defender were exposed a while back because TDL rootkit compromised the system even with the restore feature.
Now, do you understand?
Malware has increasingly more sophisticated and will become more so as time passes. We have already seen malware being VM aware a long time ago.
NOW, malware that are VM aware is NOW STANDARD. Which means malware knows when it is in sandboxie/vmware/virtualbox, etc.. the payload is not delivered so the user THINKS its safe and decides to run it in his host system. Well ralphy, big surprise.
Yes, some of you may argue that exploits like this exists in small numbers. But small numbers as it may, you are still vulnerable and do not let overconfidence be your downfall. Like I said most people are so misinformed that they are 100% safe while in a virtual environment, then they let their guards down.
One of the more safer ways is to Install VMWare through Linux.
Linux > Guest OS in VMware
Since Scrapebox uses IE as a backend, it would be wise to turn off Java and ActiveX. Save the image so you can replace the vmware image instead of reinstalling O/S everytime.
Being safe on VM
1. Make sure to disable any shared folders. Including VMware or any other VM's feature that lets you share folders between the HOST and VM.
2. Do not allow clipboard sharing
3. Use NAT
4. Use Host antivirus and firewall to firewall against it
And NEVER use this computer (yes the whole computer (guest and host) for regular purposes such as banking, FTPing, emailing, website authoring, or anything that can compromise your accounts.
READ from the beginning if you don't understand why this is necessary.
On any hardware which has sensitive data (personal info, bank info, cpanel logins, etc...) you should NEVER download any type of IM software or cracked software to it. EVER.
The 1st and BEST defense for malware protection would be COMMON SENSE.
Which most internet users do not have.
Now we got that out of the way, I can assure you that no, I mean NO virus scanner/security feature/sandbox/virtual OS can contain malware 100%. Yes I have seen POCs (proof of concept) that have broken out of contained virtualizations (yes, these are rare and hardly ever in the wild unless they are ready to be released from a blackhatter).
People assume that since each VMs looks like separate hardware, it provides the same level of isolation as true physical hardware. Appearances are deceiving. Do NOT be fooled. Guest can pass to Host given the sophistication of malware.
So as a rule of thumb, NEVER engage in hazardous activity even in a virtualized environment! You should ONLY be doing so IF you are on hardware that you don't care about and the O/S has no sensitive data.
POC of sandboxie bypassed recently by adding user accounts
Code:
http://ssj100.fullsubject.com/t370-sandboxie-bypassedExamples of older fixed vulnerabilities.
Code:
http://www.sandboxie.com/index.php?VersionChanges#v_3_40
Code:
http://www.vmware.com/security/advisories/VMSA-2009-0006.html
Code:
http://www.darkreading.com/security-services/167801101/security/application-security/217701908/index.html'Restore' programs such as Comodos Time machine, DeepFreeze, Shadow Defender were exposed a while back because TDL rootkit compromised the system even with the restore feature.
Now, do you understand?
Malware has increasingly more sophisticated and will become more so as time passes. We have already seen malware being VM aware a long time ago.
NOW, malware that are VM aware is NOW STANDARD. Which means malware knows when it is in sandboxie/vmware/virtualbox, etc.. the payload is not delivered so the user THINKS its safe and decides to run it in his host system. Well ralphy, big surprise.
Yes, some of you may argue that exploits like this exists in small numbers. But small numbers as it may, you are still vulnerable and do not let overconfidence be your downfall. Like I said most people are so misinformed that they are 100% safe while in a virtual environment, then they let their guards down.
One of the more safer ways is to Install VMWare through Linux.
Linux > Guest OS in VMware
Since Scrapebox uses IE as a backend, it would be wise to turn off Java and ActiveX. Save the image so you can replace the vmware image instead of reinstalling O/S everytime.
Being safe on VM
1. Make sure to disable any shared folders. Including VMware or any other VM's feature that lets you share folders between the HOST and VM.
2. Do not allow clipboard sharing
3. Use NAT
4. Use Host antivirus and firewall to firewall against it
And NEVER use this computer (yes the whole computer (guest and host) for regular purposes such as banking, FTPing, emailing, website authoring, or anything that can compromise your accounts.
READ from the beginning if you don't understand why this is necessary.
On any hardware which has sensitive data (personal info, bank info, cpanel logins, etc...) you should NEVER download any type of IM software or cracked software to it. EVER.
The 1st and BEST defense for malware protection would be COMMON SENSE.
Which most internet users do not have.
CyberknightTully
Junior Member
- Feb 19, 2010
- 136
- 151
I have always located my IM soft on dedicated computers which are never used for anything else. Your post and plan are worth reprinting!
dowser
Power Member
- Jun 5, 2011
- 685
- 124
Thank you! This is a great advice! I got 9 java exploits just harvesting urls in SB and with updated Eset! I think it's a must to run a dedicated machine with the above provisions.