Advice Request How can you secure folders based on these 3 requirements?

Share practical recommendations that address the author's needs.
D

daos

New Member
I'm looking for a software that can assure that media files(videos,music,pictures) or executable files inside specific folders I make can:
1.not interact with the rest of the system/OS.
2.can not access the internet or network.
3.can not execute themselves in the background without my knowledge.

What options are there that fulfill those 3 requirements? Thank you!
 
daos said:
I'm looking for a software that can assure that media files(videos,music,pictures) or executable files inside specific folders I make can:
1.not interact with the rest of the system/OS.
2.can not access the internet or network.
3.can not execute themselves in the background without my knowledge.

What options are there that fulfill those 3 requirements? Thank you!
Click to expand...
From the first point, it follows (if taken seriously) that you need another OS. So, the solution will be a Virtual Machine with a blocked network. :)

If I would guess your intentions, then you probably seek the software that can block access to the chosen folders. Next, you must combine this with opening some files by selected applications running in a sandbox with a blocked network - this can be done with ReHIPS, Comodo Firewall, or Sandboxie.
So, it can be done also without VM, but probably will be too complex for most people.
 
Last edited:
Yeah probably easiest and most quick is the use of a VM, unless that ain't installed and setup properly and the OP knows how to etc. So called Air-gapped system is also a possible option on the host, but even those have recently been hacked by researchers. 🤷‍♂️
 
Andy Ful said:
I do not know.
Click to expand...
I hadn't tried to create rules in VS before because I never needed to, but I just tried it and blocking, e.g. download folder, is easily accomplished with a custom rule. However, this seems to address only point #3.

I remember @danb saying he didn't know why more users didn't utilize the rules feature.
 
upnorth said:
So called Air-gapped system is also a possible option on the host, but even those have recently been hacked by researchers.
Click to expand...

What do you think about moving the data in question to another drive altogether and then encrypting it? (Bitlocker, VeraCrypt, etc)? Or does that present special challenges over top of the others concerns; ie: the 3 requirements OP listed in the first post.
 
If I would guess your intentions, then you probably seek the software that can block access to the chosen folders.
Click to expand...
1.files in those folders can not interact with the rest of the system/OS,meaning they can not modify/corrupt/infect OS files.
The potentially dangerous files are in those folders so i want to protect my OS and other hard drives from the files[possibly infected videos/music/pictures/executables (.exe)].
2.files in those folders can not access the internet or network.
3.files in those folders can not execute themselves in the background without my knowledge.
4.files in those folders are 24/7 following the requirements in 1-3 that i already outlined, no matter if i close my PC and open it again. I don't need to start back the service to enable their containment using the 3 requirements.


I clarified a bit what i want. What exact steps would you guys who already replied in this thread recommend?
 
Last edited:
Parvoo said:
1 2 3 all can do with ReHIPS
Click to expand...
If I correctly recall, ReHIPS does not protect files in the folder from modifications. So, the files in the folder can be replaced, modified, and accessed by malware or used to exploit applications not isolated in ReHIPS. Furthermore, the malware can drop itself into the folder and run with Windows start.
So, ReHIPS must be combined with an application that can protect folders (see my previous post: Q&A - How can you secure folders based on these 3 requirements?).

daos said:
1.files in those folders can not interact with the rest of the system/OS,meaning they can not modify/corrupt/infect OS files.
The potentially dangerous files are in those folders so i want to protect my OS and other hard drives from the files[possibly infected videos/music/pictures/executables (.exe)].
2.files in those folders can not access the internet or network.
3.files in those folders can not execute themselves in the background without my knowledge.
4.files in those folders are 24/7 following the requirements in 1-3 that i already outlined, no matter if i close my PC and open it again. I don't need to start back the service to enable their containment using the 3 requirements.


I clarified a bit what i want. What exact steps would you guys who already replied in this thread recommend?
Click to expand...

You have got a few practical solutions here:
https://malwaretips.com/threads/how...ed-on-these-3-requirements.109305/post-953469
Another one is using OS in the cloud to store/run/open suspicious files.

Anyway, even a Virtual Machine can be bypassed in the theory to break any of your points. You cannot run something on the computer with Windows and be sure that point 1 will be fulfilled in 100%.
 
"then you probably seek the software that can block access to the chosen folders."
Click to expand...
You did not mention what you recommend for this.

Also for the person recommending Rehips..seems it has not been updated since 2018.

I know I could use a VM but for some of the apps i run that is way too slow so that is not an option.
 
Last edited:
daos said:
I'm looking for a software that can assure that media files(videos,music,pictures) or executable files inside specific folders I make can:
1.not interact with the rest of the system/OS.
2.can not access the internet or network.
3.can not execute themselves in the background without my knowledge.

What options are there that fulfill those 3 requirements? Thank you!
Click to expand...
You can use Kaspersky Application Control and its firewall to configure that! and run in interactive mode.
 
ItsReallyMe said:
You can use Kaspersky Application Control and its firewall to configure that! and run in interactive mode.
Click to expand...
It depends on the version. How will you protect the folder content against malware modifications and malware access? I think that an encrypted vault could be used for it (Kaspersky Total Security), but I did not test it.
 
Last edited:
You can do that with comodo firewall. Use CS settings plus do the following....
1. Enable CS settings in containment.
2. Enable cloud lookup in file rating.
3. Select all vendor certificates in vendor list by ticking Vendor Tab.
Untitled-1.jpg
4. remove all and click "OK"
5. Now Go to settings>File List >Select all and click "look up". All files with legitimate certificate will be added automatically.
6. Disable the cloud lookup in file rating.
7. Now you can copy all those vulnerable "files" to the system. Everything except those files which were already in the file list will be automatically sandboxed if tried to run.
7. If you need to install anything just enable the cloud lookup in file rating for it and disable the same after installation.
 
harlan4096 said:
malwaretips.com

Hot Take - KIS/KTS/KSCloud/KStandard/KPlus/KPremium - Implementing Protected Folders via Manage Resources (+ Default Deny Mode)

KIS/KTS/KSCloud Kaspersky Standard/Kaspersky Plus/Kaspersky Premium Implementing Protected Folders via Manage Resources 1.- Go to Settings -> Protection -> Application Control -> Manage Resources 2.- Expand Personal Data folder and then select User Files folder 3.- Click on Add and then on...
malwaretips.com malwaretips.com
Click to expand...
It seems that Protected Folders option does not include execution restrictions. If so, then the malware could still execute files in that folder. Furthermore, if the user allows opening a file from Protected Folder then the application which opens the file (media file, document, etc.) can still be exploited and the OS infected. I think that even using an encrypted vault in Kaspersky would be insufficient. The solution would be if the applications that have access to the Protected Folders, could run in the sandbox.
 

Recently browsing

Members who viewed this thread in the last 5 minutes

You may also like...

Back
Top