Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 708273" data-attributes="member: 32260">Sadly no. I can open the DOCX files from the real location on another disk (D:\), using isolated MS Word 2007 (sandbox created automatically by ReHips in Permissive mode).&nbsp; There is only one difference, the file is opened in the read-only mode.I think, that the documents are not visible for isolated applications only when located in the User profile. It is OK, because ReHips create different user profiles for different sandboxes.But, this will be a problem for inexperienced users, because they often leave downloaded documents in the Download folder or another disk / pendrive.So, when Office 2007 is exploited, then the isolated malware will have access only to the documents placed outside of the User profile.<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite130" alt="(y)" title="Thumbs up&nbsp; &nbsp; (y)" loading="lazy" data-shortname="(y)" />As I said, the ReHips protection is impressive. The question is if it can be used in Permissive mode by inexperienced user (with occasional help).</blockquote>

[QUOTE="Andy Ful, post: 708273, member: 32260"] Sadly no. I can open the DOCX files from the real location on another disk (D:\), using isolated MS Word 2007 (sandbox created automatically by ReHips in Permissive mode). There is only one difference, the file is opened in the [B]read-only mode[/B]. I think, that the documents are not visible for isolated applications only when located in the User profile. It is OK, because ReHips create different user profiles for different sandboxes. But, this will be a problem for inexperienced users, because they often leave downloaded documents in the Download folder or another disk / pendrive. So, when Office 2007 is exploited, then the isolated malware will have access only to the documents placed outside of the User profile.(y) [B]As I said, the ReHips protection is impressive[/B]. The question is if it can be used in Permissive mode by inexperienced user (with occasional help). [/QUOTE]

Verification