3 ms·
Sandboxie is far better (or different - for its use case it is better). It doesnt use virtualization but rather hooks the APIs and redirects them to "in folder
by stiray 7y ago
Sandboxie is far better (or different - for its use case it is better). It doesnt use virtualization but rather hooks the APIs and redirects them to "in folder structure" where copy-on-write is used to keep local copy of registry, file system,... Far better and much less resource consuming aproach, its resource consumption is just a slight (I am talking about % or two) worse than native software, doing trampoline hook overhead is not worth mentioning, games will run at same speed. Imagine docker. You delete programs sandbox directory and all its traces are gone. I was its user for years (untill I have switched to linux due to some insane microsoft architectural decisions, like manifests and com junk within kernel32.dll) and was installing all the software into sandboxie, my base os was clean as "just installed". Give it a try, it is worth it. And now it is free :)
(Disclaimer: 20+ years development in low level windows world, from DRM to reversing malware and writting drivers. Dumped the windows completely and continuing on linux (didnt switch due to linux beeing any better, just windows got worse) and freebsd.)
- stiray 7y agoThis one is worth checking, sandboxie vs ransomware: https://www.youtube.com/watch?v=RVwflbmBd_A https://www.youtube.com/watch?v=RVwflbmBd_A There are two pieces of software, that I consider a must on windows (and I miss very much on linux), one is totalcommander and second is sandboxie.
- asveikau 7y ago> It doesnt use virtualization but rather hooks the APIs and redirects them to "in folder structure" Do they do it in a filesystem filter driver or similar? Hooking DLL calls in user mode is not really a secure way to do this.