Some massive applications (such as firewalls Outpost Security Suite and Online Armor Premium Firewall, as well as executable exe and msi files downloaded from the Internet of incomprehensible content) can violate the integrity and stability of the system. Installing them in a working OS can lead to BSOD screens when loading the OS, changing browser settings, and even spreading worms and trojans, which will most likely lead to the attacker stealing passwords to social network accounts you use web services, mailbox etc.

Earlier, we already wrote about popular methods for testing new software in articles about and . In this article we will talk about another simple, fast and efficient way run any applications under Windows in a secure isolated environment, and its name is the Sandboxie sandbox.

What is a sandbox?

In the region of computer security A sandbox is a specially dedicated environment designed to safely run applications on a PC. Some complex software products include a safe environment (sandbox) mode. These applications include firewall Comodo Internet Security, antivirus Avast! (paid version), developments in the field of data protection from Kaspersky Lab. The subject of our article-instruction, the Sandboxie program, is a full-fledged tool for large-scale testing of any programs without making changes to the structure and parameters of the working operating system. How to work with it - read on.

Downloading the distribution and installing Sandboxie

Before proceeding with the installation, as always, you need to download installation package online. Let's use official site project.

Although the developers offer paid versions of the product for home and office use, the free version is also quite suitable for us. It has no time limits. The only negative is the ability to work with only one sandbox and the inaccessibility of some not too critical parameters.

After downloading the distribution kit, let's start the installation procedure. It takes place in 2 phases. First put system libraries And executable files Sandbox.

On the final stage you will be prompted to install system driver A that represents the core of the application. The driver will work in conjunction with service files, its installation time is a couple of moments. We agree and move on.

First launch of Sandboxie

When you launch the app for the first time, you'll see a list of apps that can improve sandbox compatibility on your screen. Despite the fact that this list does not display all the applications available in the OS, the sandbox program automatically determined that by default these programs are not available for management in Sandboxie. We agree to improve compatibility by checking all the items in the list and clicking OK.

Next, we have to go through a short introduction to working with the application, where you can get acquainted with general principle work software product, a mechanism for launching a web browser in protected mode, as well as a function to delete the contents of an active sandbox. The manual is very concise, all its contents are reduced to a few button clicks to perform the most requested actions and a graphic illustration with the basic methodology of the service.

So, when the manual is exhausted, we can start working in an isolated environment. You can launch the application by selecting the appropriate item in the "Start" menu, or by clicking on the appropriate icon in the "Applications" view (Win 8/8.1).

An alternative way is to double click on the Sandboxie icon in the taskbar.

As a result of starting the program, a form with an active sandbox will appear on the screen, available to the user(Recall again that in free version only one sandbox can be created). Almost all operations are called from this form.

Running the browser in sandbox mode

Well, let's start the browser in protected mode. To do this, you can use the shortcut on the desktop, or by right-clicking on the DefaultBox and selecting "Run in Sandbox" -> "Launch Web Browser" from the context menu. It is worth noting that in this way you can work with the browser installed in the system as the active default.

About enabling secure isolated environment symbolizes the yellow edge that borders the browser form.

How to work with her? By running a browser in a sandbox, you can freely access any, even potentially dangerous, resources without the threat of infecting your PC with any malicious code. This mode will certainly come in handy if you are looking for keys for programs, cracks, or you, under your supervision, have seated a child at the computer, and are afraid that it can harm the system by going to unsafe resources through banners, or change browser settings by putting the next " super-unique" addition. All files downloaded using this browser will also not have access to the working system.

When trying to download a file using a sandboxed browser, pay attention to the form header for specifying a save name. The name of such a form is framed by two # characters, which indicates that the object will be wrapped when saved. Sandbox Windows and will not be available on regular disk device.

The same applies to running programs.

By default, files downloaded from the network are offered to be placed in the Desktop or Downloads folder. These directories are suitable for sandboxing.

How to make sure that the downloaded file is saved in the sandbox?

IN top menu select View and check the Files and folders option. You will see a tree of available drives and user directories that you can work with in protected mode. Open the folder you need and make sure the appropriate files are there.

Is it possible to extract a file from the sandbox by placing it in a similar folder on a normal service drive?

Of course, to do this, right-click on the file to be restored, and select "Restore to the same folder" in the context menu. The file will then be extracted.

You can also add new paths to the folders available for saving by specifying them in the Sandbox Settings form, Recovery category -> Quick Recovery section.

To open the Sandbox settings form, go to the top menu in the Sandbox option, then select the DefaultBox sub-item and in the context menu that appears, click on the Sandbox settings item.

How to install a new application in the sandbox?

Click right click mouse on the appropriate distribution, saved in a sandbox or standard OS, and select "Run in Sandbox" from the menu

Followed by routine procedure installation, which can be dealt with literally in a jiffy. The only caveat: if you want to test a 64-bit program, before installing, add the path to the “C:\Program Files” folder in the Sandboxie sandbox settings, since by default only the path to the system directory “C:\Program Files (x86)” can be present . You can do this again in the Quick Recovery menu. For the changes to take effect, click the "Apply" button and restart the installation if the process is already running.

How to run a program in the sandbox?

There are two ways for the user to run the application in a secure environment.

The first is the context menu called from the Sandbox item in the Sandboxie top menu. Here you can run anything from an external email client to a console daemon designed to compress files into an alternative audio format.

The second way is to use the Sandboxie integration with Windows Explorer. To do this, you need to right-click on the program you need on a regular working disk device and select the "Run in the sandbox" option.

Results

In general, it must be said that on 64-bit operating systems latest generation the program does not feel very confident. Periodic crashes occur, windows appear with a notification about an attempt to immediately restore running processes. However, with a little tweaking of the settings, Sandboxie can be made to run smoothly, efficiently, and without reservations, and thanks to File Explorer integration, launching applications is smooth and seamless. Along with other virtualization methods, this mechanism is an excellent tool for debugging and testing applications, which is useful for a detailed study of the interaction of a software product with a working operating environment.

Sandboxie 5.28

Sandboxie download in Russian for Windows 7

Free program Sandboxie is designed to safely run applications in a sandbox, that is, a virtual protected environment. This gives you control over everything. running processes. A sandbox is necessary when you have to run unknown or obviously dangerous programs, eliminating the risk of PC infection and disruption of its performance. You can do it for free, there is a link at the bottom of the page where you can easily do it.

The sandbox improves the security of Windows OS, provides protection against malware when surfing the web, when installing unknown programs. Sandboxie has the ability to protect against unwanted updates, knows how to monitor e-mail, uses its own trap for trojans, viruses and spyware that can hide in incoming letters.

The advantages of the sandbox are:

• advanced protection functions: now files temporarily saved while browsing cannot harm the operating system, they can be easily deleted without harm to the PC;
• ensuring mail security: viruses, malware, trojans that got into the mail with letters do not pose a threat, since the utility effectively monitors them and blocks them using its own systems.

The sandbox works very simply, any program running in it does not have access to system data, the registry, cannot make changes, indirectly or directly disrupt the operation of the OS. Running an unknown or potential dangerous program in the sandbox allows you to secure your PC. just enough download Sandboxie, assign it to a whole group of programs, setting their access to different resources depending on the purpose.

Through Sandboxie, you can ensure safe web surfing without fear of viruses during your visit various pages. The advantage is that the settings and changes should be entered only once, using them later. This makes working with the utility more convenient and simple.

Sandboxie free download

Download Sandboxie for free in Russian for Windows 7, 8 and Windows 10. Our site keeps track of all software updates so that you have latest version Sandbox.

The so-called sandbox is a relatively new feature in shareware packages. antivirus Avast! Pro and Avast! internet security. This is a special security model, thanks to which the user can visit websites and run various applications while being in safe environment. This function helps to avoid viruses in case of accidental transition to potentially . When hit on malicious resource the browser will be automatically placed in the "sandbox", and therefore the infection of the computer will be prevented.

Free versions of Avast! "sandbox" is missing.

new feature can also be run on its own when turned on extraneous programs that seem suspicious or unreliable to you. Just run the program in the "sandbox" and you will find out if it is really dangerous, or if your fears are groundless. When checking the program, your system will be protected by Avast. The "sandbox" is often used when checking software downloaded from the Internet.

How to use the sandbox

In order to run dubious application or access the Internet through the "sandbox", click on the request "run a virtualized process". After that, go to the program you need on your computer. The browser or application will launch in a new special window, framed by a red frame, indicating that the program was successfully launched from the sandbox.

In the "advanced settings" tab, you can assign applications that do not need to be virtualized, as well as those that should always be run from the "sandbox".

Feature"sandboxes" - the ability to embed in the context menu. To connect this option, in the "Options" window, check the box next to the "embed in right-click context menu" box. The option can be made available both for all users and for users with administrator rights. With its help, you can run any application in the sandbox by just right-clicking on the shortcut and selecting the “run with” command.

Please note that if you right-click on a sandboxed application, in the context menu that opens, you can select the command to run once outside the sandbox or remove the application from it.

Internet and Computer techologies completely captured modern world. Now almost everyone has electronic device, with which he can find at any time and in any place necessary information online or chat with friends. But do not forget that sometimes behind this lurks and hidden threat– viruses and malicious files created and run in global network to infect user data. Apart from standard antiviruses sandbox programs have been created to help prevent them from accessing the computer.

Purpose and principle of the program

Sandbox programs are designed to keep your computer safe while surfing the Internet or running a variety of programs. Speaking more plain language, we can say that this program is a kind of limited virtual space in which all user actions are carried out. A program that is run while the sandbox is running only runs in that environment and, if malicious virus, then its access to system files blocked.

Advantages of the sandbox

Perhaps the first advantage of this application can be taken from the paragraph above - it restricts access malicious files into the system. Even if viruses, such as trojans or worms, were picked up while surfing the Internet, but at that time the user worked with the sandbox turned on, the viruses will not penetrate anywhere else, and when the sandbox is cleaned, they will be completely removed from the computer without a trace . In addition, such programs help speed up the computer. Since for the most part the activity of the "sandbox" is connected with working in browsers, each time launching it ( Google Chrome Opera, Mozilla Firefox), before the user will open absolutely clean and as if anew installed browser, which does not have the usually slowing down garbage - "cache".

Cons of the sandbox

There are also those, and the most important thing is the deletion of personal data, whether it be bookmarks, pages saved while working on the Internet, or even history. The program is not configured to recognize what exactly is harmful to the device, therefore, when cleaning, absolutely all data is permanently deleted from it. The user needs to take this into account and, if necessary, synchronize the necessary bookmarks or use special applications for storing such data.

On the currently there are many names of such programs, among the well-known ones are Sandboxie, Comodo Internet Security, etc. Everyone chooses the one that is more convenient and understandable for him. In any case, do not forget about the disadvantages of these programs and use them carefully.

Avast is one of the antivirus programs. Installing and registering it is as simple as possible. There are versions for PC and mobile devices. At the same time, a license for the first year of use can be obtained absolutely free of charge. Avast offers various additional options protection. It also has the ability to add exceptions.

You will need

• A computer, mobile device, the Internet.

Instruction

Inside the screen file system click the "Settings" button, then select the "Exceptions" tab. By clicking on "Browse", you will see contents of the hard disk. Perform exclusion selection by ticking desired folders or files double click and clicking on OK. Confirm your choice in the next window by clicking OK again.

You can endlessly look at the fire, water and activity of programs isolated in the sandbox. Thanks to virtualization, with one click you can send the results of this activity - often insecure - into oblivion.

However, virtualization is also used for research purposes: for example, you wanted to control the impact of a freshly compiled program on the system or run two different versions applications at the same time. Or create a standalone application that won't leave any traces on the system. There are many options for using the sandbox. It is not the program that dictates its conditions in the system, but you show it the way and allocate resources.

If you are not satisfied with the slowness of the process, using the ThinApp Converter tool you can put virtualization on stream. Installers will be created based on the config you specified.

In general, the developers advise to produce all these preparations under sterile conditions, on a fresh operating system, so that all the nuances of the installation are taken into account. For these purposes, you can use virtual machine, but, of course, this will leave its mark on the speed of work. VMware ThinApp already loads well system resources, and not only in scan mode. However, as they say, slowly but surely.

BufferZone

• Website: www.trustware.com
• Developer: trustware
• License: freeware

BufferZone controls the Internet and software activity of applications using a virtual zone, closely approaching firewalls. In other words, it uses rules-driven virtualization. BufferZone works seamlessly with browsers, instant messengers, email and P2P clients.

At the time of writing, the developers were warning about possible problems when working with Windows 8. The program is able to kill the system, after which it will have to be deleted through safe mode. This is due to the BufferZone drivers, which come into serious conflict with the OS.

What falls under the BufferZone radar can be tracked in the main Summary section. Number limited applications you define it yourself: the Programs to run inside BufferZone list is intended for this. It already includes potentially unsafe applications like browsers and email clients. A red border appears around the window of the captured application, giving you confidence to surf safely. If you want to run outside the zone - no problem, the control can be bypassed through the context menu.

In addition to the virtual zone, there is such a thing as a private zone. You can add sites to it that require the strictest confidentiality. It should be noted right away that the function only works in Internet Explorer retro versions. In more modern browsers there are built-in means to ensure anonymity.

In the Policy section, the policy is configured in relation to installers and updates, as well as programs launched from devices and network sources. See also Advanced Policy options in Configurations. There are six levels of control, depending on which the attitude of BufferZone to programs changes: no protection (1), automatic (2) and semi-automatic (3), notifications about the launch of all (4) and unsigned programs (5), maximum protection (6).

As you can see, the value of BufferZone is total Internet control. If you need more flexible rules, then any firewall will help you. BufferZone also has it, but more for show: it allows you to block applications, network addresses and ports. From a practical point of view, it is not very convenient for active access to the settings.

Evalaze

• Website: www.evalaze.de/en/evalaze-oxid/
• Developer: Dogel GmbH
• License: freeware / commercial (€2142)

The main feature of Evalaze is the flexibility of virtualized applications: they can be run from removable media or from network environment. The program allows you to create completely standalone distributions that operate in an emulated file system and registry environment.

The main feature of Evalaze is a user-friendly wizard that is understandable without reading the manual. First, you make an image of the OS before installing the program, then you install it, make a test run, and configure it. Next, following the Evalaze wizard, you analyze the changes. It is very similar to the principle of operation of uninstallers (for example, Soft Organizer).

Virtualized applications can work in two modes: in the first case, write operations are redirected to the sandbox, in the second case, the program will be able to write and read files in real system. Whether the program will delete traces of its activities or not is up to you, the Delete Old Sandbox Automatic option is at your service.

Many interesting features are available only in commercial version Evalaze. Among them - editing environment elements (such as files and registry keys), importing projects, setting the reading mode. However, the license costs more than two thousand euros, which, you see, is somewhat higher than the psychological price barrier. At a similarly prohibitive price, the use of an online virtualization service is offered. As a consolation, the developer's site has pre-made virtual sample applications.

cameyo

• Website: www.cameyo.com
• Developer: cameyo
• License: freeware

A cursory examination of Cameyo suggests that the functions are similar to Evalaze and you can “blind” a distribution kit with a virtualized application in three clicks. The packer takes a snapshot of the system, compares it with the changes after installing the software, and creates an ecosystem to run.

The most important difference from Evalaze is that the program is completely free and does not block any options. The settings are conveniently concentrated: switching the virtualization method with saving to disk or in memory, choosing the isolation mode: saving documents to specified directories, prohibiting writing or full access. In addition, you can set virtual environment using the file editor and registry keys. Each folder also has one of three isolation levels that can be easily overridden.

You can specify how to clean up the sandbox after exiting the offline application: remove traces, no cleanup, and write registry changes to a file. Also available is integration with Explorer and the ability to bind to specific file types in the system, which is not even available in paid analogues cameyo.

However, the most interesting is not local part Cameyo, and an online packager and public virtual applications. It is enough to specify the URL or upload the MSI or EXE installer to the server, specifying the bitness of the system, and you will get a standalone package at the output. From now on, it is available under the roof of your cloud.

Summary

Sandboxie will the best choice for experiments in the sandbox. The program is the most informative among the listed tools, it has a monitoring function. A wide range of settings and good options for managing a group of applications.

It does not have any unique functions, but it is very simple and trouble-free. An interesting fact: the article was written inside this “sandbox”, and due to an unfortunate mistake, all changes went into the “shadow” (read: astral). If not for Dropbox, a completely different text would have been published on this page - most likely, by a different author.

Evalaze offers not a complex virtualization approach, but an individual one: you control the launch specific application by creating artificial habitat conditions for this. There are advantages and disadvantages here. However, taking into account the curtailedness of the free version of Evalaze, the dignity will fade in your eyes.

cameyo carries a certain “cloudy” flavor: the application can be downloaded from the site, uploaded to a USB flash drive or Dropbox - this is convenient in many cases. True, it leads to associations with fast food: you can’t vouch for the quality and compliance of the content with the description.

But if you prefer to cook according to the recipe, VMware ThinApp- your option. This is a solution for experts who care about every nuance. A set of unique features is complemented by the capabilities of the console. You can convert apps from command line, using configs, scripts - in individual and batch mode.

BufferZone is a sandbox with a firewall function. This hybrid is far from perfect and up-to-date settings, but you can use BufferZone to control Internet activity and applications, protect against viruses and other threats.

The Sandboxie program creates an isolated environment on the computer. An isolated environment or "sandbox" is an environment where running programs do not have direct access to system files and important settings computer.

The processes taking place in running program, isolated from the rest of the system. At the same time, the operating system is protected from changes that may occur when a potentially dangerous program is launched.

You can use the isolated environment to launch an unknown program or visit a potentially dangerous site after launching a browser, without risking your computer.

If malware still got into your computer, then it will not have access to system files to change them. And when you exit the isolated environment, all files that entered the isolated environment will be deleted.

You can create your own isolated environment using specialized programs, which restrict access to system files. One such program is the Sandboxie program.

The Sandboxie program is a sandbox for potentially dangerous and unfamiliar programs, as well as to surf the Internet safely.

The Sandboxie program has the status of shareware. After 30 days of working with the program, the program will ask you to switch to paid version. But, most of the program's functions will work in free mode any time. Only some features of this program will be disabled (for example, simultaneous launch several "sandboxes").

You can download the Sandboxie program from the official website of the manufacturer.

sandbox download

After loading Sandboxie programs on your computer, run its installation. In the program installation window, select the Russian language.

In the next window, you agree to install the driver for the Sandboxie program, and then click on the "Next" button. In the last window of the installation of the program, click on the "Finish" button.

The program can be launched from the Start menu => All Programs => Sandboxie. There are several points for launching the program for specific purposes.

The Sandboxie program can also be launched from the Notification Panel (tray) by clicking on the program icon. From the shortcut on the Desktop, you can launch the browser in the sandbox, the one that is selected as the default browser on your system.

Launch Sandboxie to make some tweaks to the program. The main window of the program displays the isolated environment created by default - the "sandbox".

Now consider this question: how to set up Sandboxie.

Sandbox setup

To configure the program, right-click on the name of the "sandbox". After that, in the context menu, click on the "Sandbox Settings" item.

In the settings window of the sandbox - "DefaultBox", in the "Behavior" section, you can check the box next to the item "Do not show the Sandboxie indicator in the window title" if you do not want the windows of programs opened in the "sandbox" to be marked with a special icon. You can do this at your discretion.

By clicking on the yellow box, in the "Color" window that opens, you can select a color to display a thin border around the window of the program running in the "sandbox". After these settings, if you have changed something in the program settings, click on the "Apply" button.

In the "Recovery" section, in the "Quick Recovery" subsection, you can select folders for quick recovery if you want to change the program's default settings.

In the Immediate Recovery subsection, you can exclude files, folders, or file extension types from immediate recovery if these files are saved by a program running in the sandbox.

In the "Deletion" section, in the "Deletion suggestion" subsection, you can check the box "Never delete this sandbox or clean up its contents" in order not to lose the data stored in the sandbox.

In the "Restrictions" section, in the "Internet Access" subsection, you can add programs to the list or remove programs from the list of programs that can access the Internet. You can allow or block programs from accessing the Internet when they are in a secure environment. If you click on the block all programs button, then all programs running in the sandbox will be blocked from accessing the Internet.

In the "Applications" section, you can choose the rules of conduct for various programs running in the Sandboxie program.

In the "Sandbox" menu section, by clicking on the "Set storage folder" item, you can change the drive on which the sandboxes will be stored if you have little space on the "C" drive.

After clicking on the "Create a new sandbox" item, you can create an unlimited number of sandboxes, each with its own settings, in order to run programs from different settings behavior from their sandbox.

This mode of running multiple sandboxes at the same time, only works in paid option program, after completion of the trial period of work with the program.

Each virtual space works separately, sandboxes are isolated from the system and from each other. By default, the application offers one isolated Sandbox DefaultBox.

How to use Sandbox

First way. In order to run the program in safe mode, right-click on the name of the "sandbox" and in the context menu click on the item "Run in sandbox". In the list of launch items, you can select the appropriate item to launch the program.

You can launch a browser mail client, installed by default, as well as launch any program from here or from the Start menu. You can also start Explorer in a safe environment if you click on the "Start Windows Explorer" item.

After that, Explorer will be launched in a protected environment. To close Explorer, right-click on the program folder in the "Manage Sandboxie" window, and select "End Program" in the context menu, or simply close Explorer in the usual way for programs by clicking on the red button.

Second way. It's even easier to run the program in Sandboxie by simply clicking on the program's folder or shortcut, and then selecting "Run in Sandbox" from the context menu.

If you have created several sandboxes, Sandboxie will prompt you to select the desired sandbox to run the program. Select the isolated environment, and then click on the "OK" button.

After that, the program is launched in an isolated environment. When you hover over a program running in the sandbox, a thin colored border will be visible around the program window.

File Recovery in Sandboxie

The Sandboxie program does not allow files from a program running in the sandbox to penetrate into operating system without your permission. All files created by the program or downloaded from the Internet will by default be deleted after the sandbox is closed.

Working in the Sandboxie program, you can create and save files in regular folders on your computer. These files will not be visible until you give Sandboxie permission to transfer data from the sandbox to the regular environment.

After you have downloaded any files from the Internet using a browser running in an isolated environment, these files will be located in the place where downloads are saved on your computer.

But, you will not see these files while they are in the sandbox. You will need to move these files from the isolated environment to the normal environment.

In Sandboxie, this is called "restoring" the files. There are three file recovery modes: Immediate Recovery, Quick Recovery and Manual Recovery.

Immediate Recovery in Sandboxie

This is the most The best way recovery, as it can automatically call the restore function as soon as the files are created. By default, the program keeps a particularly close eye on the Downloads, Documents, Favorites, and Desktop folders.

You can add other folders to these folders at your discretion in the program settings (right-click on the sandbox folder => "Sandbox Settings" => "Recovery").

After the file is saved to the computer, Sandboxie will immediately show the "Immediate Recovery" window. You can click on the "Repair" button, and if you click on the "Restart" button, then "Repair and explore" or "Repair and run".

Quick Recovery in Sandboxie

At fast recovery files from the isolated environment are transferred in a fast manual mode. You can configure the program to restore files saved in the sandbox when accessing this mode.

Manual recovery in Sandboxie

If you want to clear the sandbox by right-clicking on the sandbox name and selecting context menu"Remove content". After that, the "Delete Sandbox" window appears.

In this window, you can "Restore to the same folder", "Restore to any folder", or "Add folder" files located in the isolated environment. If you click on the "Delete sandbox" button, then all processes in it are terminated and all its contents are deleted.

Using the Sandboxie program allows you to achieve greater security when using your computer. You can safely run some programs in an isolated environment, surf the Internet safely.

Sandboxing tools also have some antivirus programs, for example, .

Article Conclusions

The Sandboxie program runs applications in a sandbox, thereby preventing possible dangerous components from penetrating the system. Also, with the help of this program, you can test new programs without installing them on your computer.