Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I need to run a program, but I don't trust the author. I think it is infected with spyware or viruses, malicious files. I scanned it, did n't find anything, but still not feeling good about it.

So I was thinking to create another windows user account

  • Will viruses on one account infect the second account? Do I have to scan both user accounts?
  • And if I removed the account infected, will viruses be removed from the PC?

If that won't work then

  • Is there any "sandbox" to do some testing and insure that you're PC is safe?
  • Is Virtualbox an option?
share|improve this question
add comment

4 Answers

up vote 8 down vote accepted

Use Sandboxie. You can get it at sandboxie.com

Using another account will only help if you set the account as limited and the program you're trying to run doesn't request privilege escalation. Running your program in a sandbox like Sandboxie is much safer and easier.

share|improve this answer
    
. . . and having a backup. –  Psycogeek Aug 14 '13 at 22:48
    
@Psycogeek i don't think a backup will work that's why i haven't mentioned it in the question, i searched yesterday and here's what i found superuser.com/questions/201468/… –  Fischer Aug 14 '13 at 22:57
5  
system restore , no way. a real whole backup of the system, that is restored fully without the system being operational or existing at all, including MBR. Like acronis from a CD, or some such cloning or imaging methods. –  Psycogeek Aug 14 '13 at 23:00
    
@Psycogeek thanks for info sir! will definitely look into that! –  Fischer Aug 14 '13 at 23:02
1  
@FakeName A VM is not magically secure, there may be flaws: en.wikipedia.org/wiki/Virtual_machine_escape –  Tobias Kienzler Aug 15 '13 at 10:41
show 4 more comments

Note that a problem (the main problem) with solutions like VirtualBox, Vmware, or Windows Virtual PC, is that some (many) viruses are designed to spread to network shares and attached drives.

A solution to this problem is to make sure that your virtual box/machine has no network connections and no attached drives.

Which does make it rather harder to use, and much less convinient. But not impossible. Copy any software you want to test to the virtual box/machine, stop it, disconnect it. Restart it and install/test/use the software you want to install/test/use, the stop (and discard any changes that have been made to the virtual machine)

share|improve this answer
add comment

When running suspect programs, you have to be aware that the program will infect the operating system of the computer, not just the user account.

To do so semi-safely, it would be best to run some sort of virtualization program like parallels or vmware or others which creates a virtualized instance - another copy of the operating system running partitioned. You could then boot the virtual OS, run the program and then later exit and throw away the virtual copy.

That said, it is highly desirable to NOT do this since it could do things like try to change your router settings or get other info about your LAN devices, damage or transmit info from files it can see and do other things - only limited by how much you allow the virtualized OS to see other things on your LAN.

share|improve this answer
    
Routers have passwords for a reason rouge programs cannot change static settings –  Ramhound Aug 15 '13 at 0:26
    
Yeah, but many people don't change the default passwords. More don't disable UPNP. And MANY router software packages are riddled with security flaws that allow for compromising them. –  Blackbeagle Aug 15 '13 at 7:02
add comment

From my personally experience if you want to run a program, but do not trust it, don't run it. However, take a look at where the program comes from. Many programs can be found on sites like sourceforge.com, github.com, etc, are open source and are generally peer reviewed - thus are unlikely to harbor a virus.

  • Will viruses on one account infect the second account? Do I have to scan both user accounts? Yes, and yes Viruses will spread (why they are called viruses).
  • And if I removed the account infected, will viruses be removed from the PC? Unlikely - if the viruses was designed well removing directories (users) will not help.
  • Is there any "sandbox" to do some testing and insure that you're PC is safe? Yes, many. This depends on what you want and what type of testing.
  • Is Virtualbox an option? A great option. and free. This will lower the chance of the virus escaping the testing grounds. However, there is still a chance (small) that a good virus can escape.
share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.